Platform

CI/CD Integration

CoreLink integrates with CI/CD platforms to inject secrets at build time and scan for exposed credentials in pipeline artifacts. The GitHub Actions step (techblend/corelink-scan-action@v2) runs as a pre-merge check, blocking pull requests that introduce leaked secrets. Similar plugins are available for GitLab CI and Jenkins.

For secret injection, pipelines authenticate with a workspace-scoped API key and retrieve secrets via the SDK or CLI. Secrets are injected as environment variables and never written to disk.

CI/CD Integration screenshot

Key Configuration

  • CI platform (GitHub Actions, GitLab CI, Jenkins)
  • API key scope (workspace, environment)
  • Scan action failure mode (block / warn)
  • Secret injection method (env var, file mount)
All documentation Question about this? Talk to us