CI/CD Pipeline Compliance
Overview
CI/CD Pipeline Compliance - Track component-level compliance from GitLab and GitHub pipelines.
Commands
| Command | Description |
|---|---|
regscale pipeline get_assessments | Get assessments for an SSP, optionally filtered by repository. Example: regscale pipeline get_assessments --regscale_id 123 --project-id gitlab-456 |
regscale pipeline list_components | List all components for an SSP. Example: regscale pipeline list_components --regscale_id 123 |
regscale pipeline report_scan | Report a pipeline scan result to RegScale. Creates/updates a component for the repository, creates an assessment, and updates the control implementation status at the component level. Example: regsc |
regscale pipeline setup_component | Create or get a component for a repository. Use this command to pre-create components before running pipelines, or to verify component setup. Example: regscale pipeline setup_component --regscale_id |
regscale pipeline get_assessments
regscale pipeline get_assessmentsGet assessments for an SSP, optionally filtered by repository.
Example: regscale pipeline get_assessments --regscale_id 123 --project-id gitlab-456
regscale pipeline get_assessments [OPTIONS]
| Flag | Type | Required | Default | Description |
|---|---|---|---|---|
--regscale_id, -id, --id | integer | Yes | — | Enter the desired ID # from RegScale. |
--project-id, -pid | text | No | — | Filter by project/repository ID (automationId) |
--limit, -l | integer | No | 10 | Maximum number of assessments to return |
regscale pipeline list_components
regscale pipeline list_componentsList all components for an SSP.
Example: regscale pipeline list_components --regscale_id 123
regscale pipeline list_components [OPTIONS]
| Flag | Type | Required | Default | Description |
|---|---|---|---|---|
--regscale_id, -id, --id | integer | Yes | — | Enter the desired ID # from RegScale. |
regscale pipeline report_scan
regscale pipeline report_scanReport a pipeline scan result to RegScale.
Creates/updates a component for the repository, creates an assessment, and updates the control implementation status at the component level.
Example: regscale pipeline report_scan --regscale_id 123 --control-id RA-5 -f scan-results.json regscale pipeline report_scan --regscale_id 123 --control-id 315 -f scan-results.json
Environment variables (auto-detected): GitLab: CI_PROJECT_ID, CI_PROJECT_NAME, CI_COMMIT_SHA, etc. GitHub: GITHUB_REPOSITORY, GITHUB_SHA, GITHUB_RUN_ID, etc.
regscale pipeline report_scan [OPTIONS]
| Flag | Type | Required | Default | Description |
|---|---|---|---|---|
--regscale_id, -id, --id | integer | Yes | — | Enter the desired ID # from RegScale. |
--provider, -p | choice | No | auto | CI/CD provider (auto-detects from environment) Choices: gitlab, github, auto |
--project-id, -pid | text | No | — | Project/repository ID (auto-detects from environment) |
--project-name, -pn | text | No | — | Project/repository name (auto-detects from environment) |
--control-id, -cid | text | Yes | — | Security control ID or identifier (e.g., 'RA-5' or numeric ID 315) |
--scan-file, -f | path | No | — | Path to scan results file (JSON: SARIF, GitLab SAST, Trivy) |
--scan-type, -t | choice | No | container | Type of security scan Choices: container, sast, dast, dependency, infrastructure, secret |
--scan-passed, -sp | boolean | No | — | Manually indicate scan passed (overrides file parsing) |
--scan-failed, -sf | boolean | No | — | Manually indicate scan failed (overrides file parsing) |
--create-issues, --no-create-issues | boolean | No | true | Create issues from findings (default: yes) |
--compliance-settings-id, -csid | integer | No | 1 | Compliance settings ID (default: 1) |
--token, -tk | text | No | — | API token for provider (defaults to environment variable) |
regscale pipeline setup_component
regscale pipeline setup_componentCreate or get a component for a repository.
Use this command to pre-create components before running pipelines, or to verify component setup.
Example: regscale pipeline setup_component --regscale_id 123 --project-id 456 --project-name my-repo
regscale pipeline setup_component [OPTIONS]
| Flag | Type | Required | Default | Description |
|---|---|---|---|---|
--regscale_id, -id, --id | integer | Yes | — | Enter the desired ID # from RegScale. |
--project-id, -pid | text | Yes | — | Project/repository ID |
--project-name, -pn | text | Yes | — | Project/repository name |
--description, -d | text | No | — | Component description |
--component-type, -ct | choice | No | Software | Component type Choices: Software, Hardware, Service, Policy, Process, Procedure |
--compliance-settings-id, -csid | integer | No | 1 | Compliance settings ID |
Updated about 5 hours ago