Integrate LibTracker into your CI/CD
Automate SBOM generation and CVE monitoring with every build. Compatible with all popular CI/CD tools.
How does it work?
4 steps for successful integration
Generate a CI token
Create a secure API token from your LibTracker project settings
Add the script to your pipeline
Copy-paste our sample configuration into your CI/CD file
Automatic push on every build
Your lock files are automatically sent to LibTracker
Real-time monitoring
Receive instant alerts when new CVEs are detected
CI Token Generation
Simple interface to create and manage your CI/CD API tokens
Integration Examples
Configure your CI/CD integration in 4 simple steps
Select your package managers
Select all package managers present in your project (you can select multiple)
Choose your CI/CD platform
Select the CI/CD platform you want to integrate with
Configure your CI secrets
Add these secrets to your CI/CD platform settings:
LIBTRACKER_PROJECT_IDYour LibTracker project ID (found in project settings)
LIBTRACKER_TOKENYour CI token (generate it from project settings > CI/CD Tokens)
Copy your configuration
GitHub Actions
Native GitHub Actions integration in just a few lines
name: LibTracker CI
on:
push:
branches: [ main ]
jobs:
libtracker:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v3
- name: Upload to LibTracker
run: |
curl -X POST "https://api.libtracker.io/ci/projects/${PROJECT_ID}/releases" \
-H "Authorization: Bearer ${LIBTRACKER_TOKEN}" \
-H "Accept: application/json" \
-F "version=${GITHUB_SHA}" \
-F "files[]=@./package-lock.json"
env:
PROJECT_ID: ${{ secrets.LIBTRACKER_PROJECT_ID }}
LIBTRACKER_TOKEN: ${{ secrets.LIBTRACKER_TOKEN }}Advanced Features
Go further with LibTracker integration
Automatic Versioning
LibTracker automatically detects your version from Git tags or environment variables
Multi-format Support
Supports all lock file formats: package-lock.json, yarn.lock, Gemfile.lock, etc.
Ultra-fast Upload
Optimized upload time to avoid slowing down your builds
Robust Error Handling
Automatic retry and detailed logging for easy debugging