Get started in 60 seconds

# .github/workflows/compliance.yml
name: Compliance Scan
on: 
  push:
    branches: [main, develop]
  pull_request:

jobs:
  audit:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      security-events: write
    
    steps:
      - uses: actions/checkout@v3
      
      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@v2
        with:
          role-to-assume: ${{ secrets.AWS_ROLE_ARN }}
          aws-region: us-east-1
      
      - name: Install IntendCloud Audit
        run: |
          curl -sSL https://intendcloud.com/install.sh | bash
          echo "$HOME/.intendcloud/bin" >> $GITHUB_PATH
      
      - name: Run Compliance Scan
        env:
          INTEND_LICENSE_KEY: ${{ secrets.INTEND_LICENSE_KEY }}
        run: |
          intend audit \
            --ci \
            --frameworks cis-aws,soc2 \
            --severity-threshold high \
            --output-format sarif
      
      - name: Upload SARIF to GitHub Security
        uses: github/codeql-action/upload-sarif@v2
        if: always()
        with:
          sarif_file: audit-results.sarif
      
      - name: Upload HTML Report
        uses: actions/upload-artifact@v3
        if: always()
        with:
          name: compliance-report
          path: audit-report-*.html

# .gitlab-ci.yml
compliance_scan:
  stage: test
  image: ubuntu:22.04
  
  before_script:
    - apt-get update && apt-get install -y curl
    - curl -sSL https://intendcloud.com/install.sh | bash
    - export PATH="$HOME/.intendcloud/bin:$PATH"
  
  script:
    - intend audit --ci --frameworks cis-aws,soc2 --severity-threshold high
  
  artifacts:
    when: always
    paths:
      - audit-report-*.html
      - audit-results.json
    reports:
      junit: audit-results.junit.xml
  
  only:
    - main
    - merge_requests