🏗️ Architecture

Component-Based Design

• Platform-native template implementations
• Reusable across multiple projects and repositories
• Standardized 7-step security testing workflow
• Platforms: Azure DevOps, GitHub Actions, GitLab CI/CD

Common Workflow (7 Steps)

All templates implement the same comprehensive security testing workflow:

1. Validate Configuration - Check required API keys and parameters
2. Update Chatbot API - Configure chatbot endpoint and API specification
3. Start Security Scan - Initiate comprehensive security testing via GenR3D API
4. Monitor Progress - Poll scan status with timeout handling
5. Retrieve Reports - Download JSON and PDF security reports
6. Process Findings - Extract individual findings for integration systems
7. Evaluate Results - Apply configurable pass/fail criteria based on severity thresholds

📈 Value Proposition

For Development Teams

• 5-Minute Integration: Copy-paste templates with minimal configuration
• Zero Learning Curve: Uses familiar CI/CD tools and patterns
• Automated Security: Replace time consuming manual security testing
• Immediate Feedback: Security results in pipeline reports

For Security Teams

• Consistent Testing: Standardized security validation across all projects
• Detailed Reporting: Individual findings for tracking and remediation
• Compliance Ready: Audit trails and automated documentation
• Configurable Gates: Flexible pass/fail criteria

For DevSecOps Teams

• Pipeline Integration: Seamless integration with existing workflows
• Artifact Management: Proper handling of reports and findings
• Monitoring: Clear status reporting and error handling
• Scalable: Reusable across multiple projects and teams

🔧 Technical Implementation

GenR3D API Integration

• Base URL: https://genr3d-api.generativesecurity.ai
• Authentication: API Key via x-api-key header
• Key Endpoints
  • PUT /chatbots/{id}/api - Update chatbot configuratio
  • POST /scans - Start security scan
  • GET /scans/{id} - Check scan status
  • GET /scans/{id}/json - Download JSON report
  • GET /scans/{id}/pdf - Download PDF report

Security & Best Practices

1. ✅ Secure credential handling via platform secrets/variables
2. ✅ No hardcoded credentials in any template files
3. ✅ Comprehensive error handling with clear error messages
4. ✅ Timeout management for long-running scans
5. ✅ Artifact management for reports and findings
6. ✅ Configurable thresholds for pass/fail criteria

📊 Supported Platforms