Skip to content
Pompelmi

CI/CD artifact scanning

Upload security is not only for runtime routes. CI/CD pipelines also handle archives, generated bundles, fixtures, and user-supplied samples that deserve inspection before promotion.

Practical fit

Section titled “Practical fit”
  • Build output that contains generated ZIPs or WASM bundles.
  • Repository fixtures or sample files.
  • Packages or assets pulled into internal distribution workflows.

CLI entry point

Section titled “CLI entry point”
Terminal window
npx @pompelmi/cli scan:dir ./dist --format json

Use the JSON output to fail a pipeline on anything that should not be promoted.

Continue

Section titled “Continue”