CircleCI Integration

Introduction

CircleCI is a continuous integration and continuous delivery platform that can be used to implement DevOps practices.

The following configuration examples show how to install & run the scanner using an API Token stored as a secret named XYGENI_TOKEN. See Generate Xygeni API Token for Scanner or ask your Xygeni administrator to generate it.

See Private keys and secrets for details about how to add the token as a secret in CircleCI.

Using the installation script

You may automatically install the scanner using the installation script available from https://get.xygeni.io/latest/scanner/TYPE, with TYPE either bash or powershell:

jobs:
  build:
    steps:
      - run:
        name: Install Xygeni scanner
        command: >
          curl -L https://get.xygeni.io/latest/scanner/install.sh |
          /bin/bash -s -- -o -t $XYGENI_TOKEN

      - run:
        name: Scan for issues
        command: >
          $HOME/xygeni_scanner/xygeni scan
            -n $PROJECT_NAME
            --dir $PROJECT_HOME

See installation script for more details.

Please refer to the scanner documentation for full details on the scanner command line options and configuration.

Using the docker image

If it is not possible to install the scanner in the CircleCI host running the job, you may run the docker image instead:

jobs:
  build:
    steps:
      - run:
        name: Scan for issues
        command: >
          docker run
            -v $PROJECT_HOME:/app
            -v $DD_CONF:/opt/xygeni_scanner/conf
            -t -rm
            xygeni_scanner/xygeni scan -n $PROJECT_NAME --dir /app

See Xygeni Scanner docker image for more details.