GenR3d Platform Integration with your CI/CD Pipeline

🏗️ Architecture

Component-Based Design

• Platform-native template implementations
• Reusable across multiple projects and repositories
• Standardized 7-step security testing workflow
• Platforms: Azure DevOps, GitHub Actions, GitLab CI/CD

Common Workflow (7 Steps)

All templates implement the same comprehensive security testing workflow:

1. Validate Configuration – Check required API keys and parameters
2. Update Chatbot API – Configure chatbot endpoint and API specification
3. Start Security Scan – Initiate comprehensive security testing via GenR3D API
4. Monitor Progress – Poll scan status with timeout handling
5. Retrieve Reports – Download JSON and PDF security reports
6. Process Findings – Extract individual findings for integration systems
7. Evaluate Results – Apply configurable pass/fail criteria based on severity thresholds

📈 Value Proposition

For Development Teams

• 5-Minute Integration: Copy-paste templates with minimal configuration
• Zero Learning Curve: Uses familiar CI/CD tools and patterns
• Automated Security: Replace time consuming manual security testing
• Immediate Feedback: Security results in pipeline reports

For Security Teams

• Consistent Testing: Standardized security validation across all projects
• Detailed Reporting: Individual findings for tracking and remediation
• Compliance Ready: Audit trails and automated documentation
• Configurable Gates: Flexible pass/fail criteria

For DevSecOps Teams

• Pipeline Integration: Seamless integration with existing workflows
• Artifact Management: Proper handling of reports and findings
• Monitoring: Clear status reporting and error handling
• Scalable: Reusable across multiple projects and teams

🔧 Technical Implementation

GenR3D API Integration

• Base URL: https://genr3d-api.generativesecurity.ai
• Authentication: API Key via x-api-key header
• Key Endpoints
  • PUT /chatbots/{id}/api – Update chatbot configuratio
  • POST /scans – Start security scan
  • GET /scans/{id} – Check scan status
  • GET /scans/{id}/json – Download JSON report
  • GET /scans/{id}/pdf – Download PDF report

Security & Best Practices

1. ✅ Secure credential handling via platform secrets/variables
2. ✅ No hardcoded credentials in any template files
3. ✅ Comprehensive error handling with clear error messages
4. ✅ Timeout management for long-running scans
5. ✅ Artifact management for reports and findings
6. ✅ Configurable thresholds for pass/fail criteria

📊 Supported Platforms

Platform	Template Type	Integration Method	Status
Azure DevOps	Parameterized Template	Reference from pipeline	✅ Complete
GitHub Actions	Reusable Workflow	Call from any repository	✅ Complete
GitLab CI/CD	Include Template	Include in project	✅ Complete