Build with AppAudix

# 1. Install
npm install -g @appaudix/cli

# 2. Authenticate (get your key from appaudix.com/profile)
appaudix login --key sk_live_xxxxxxxxxxxx

# 3. Scan
appaudix scan MyApp.apk --frameworks pci_dss

npm install -g @appaudix/cli

appaudix --version

appaudix login

appaudix login --key sk_live_xxxxxxxxxxxx

export APPAUDIX_API_KEY=sk_live_xxxxxxxxxxxx

appaudix logout

appaudix scan <file> [options]

# Basic scan
appaudix scan MyApp.apk

# Two frameworks
appaudix scan MyApp.apk --frameworks pci_dss,owasp_masvs

# JSON output (for piping / scripting)
appaudix scan MyApp.apk --output json | jq '.results'

# CI/CD: fail the build if any HIGH or above finding
appaudix scan MyApp.apk --fail-on high

# Submit without waiting (fire and forget)
appaudix scan MyApp.apk --no-wait

# With webhook callback
appaudix scan MyApp.apk --webhook https://ci.example.com/hook --callback-id build-1234

appaudix scans [scan_id] [options]

# List last 20 scans
appaudix scans

# List last 50 completed scans
appaudix scans --limit 50 --status completed

# Inspect a specific scan
appaudix scans b8afcd12-8628-45ef-a953-5f34fbc067e0

# Cancel a running scan
appaudix scans b8afcd12-8628-45ef-a953-5f34fbc067e0 --cancel

# Machine-readable output
appaudix scans --output json

appaudix report <scan_id> [options]

# JSON report to stdout
appaudix report b8afcd12-8628-45ef-a953-5f34fbc067e0

# PDF report saved to file
appaudix report b8afcd12-8628-45ef-a953-5f34fbc067e0 --format pdf --output report.pdf

# HTML report
appaudix report b8afcd12-8628-45ef-a953-5f34fbc067e0 --format html --output report.html

# SARIF for GitHub Code Scanning (Pro+)
appaudix report b8afcd12-8628-45ef-a953-5f34fbc067e0 --format sarif --output results.sarif.json

# .github/workflows/security-scan.yml
name: Security Scan

on: [push, pull_request]

jobs:
  scan:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Install AppAudix CLI
        run: npm install -g @appaudix/cli

      - name: Scan app
        env:
          APPAUDIX_API_KEY: ${{ secrets.APPAUDIX_API_KEY }}
        run: |
          appaudix scan app/build/outputs/apk/release/app-release.apk \
            --frameworks pci_dss,owasp_masvs \
            --fail-on high \
            --output json > scan-results.json

      - name: Upload scan results
        uses: actions/upload-artifact@v4
        if: always()
        with:
          name: security-scan
          path: scan-results.json

# .gitlab-ci.yml
security-scan:
  image: node:20
  stage: test
  script:
    - npm install -g @appaudix/cli
    - appaudix scan app-release.apk --frameworks pci_dss --fail-on high
  variables:
    APPAUDIX_API_KEY: $APPAUDIX_API_KEY  # set in GitLab CI/CD variables

# bitbucket-pipelines.yml
pipelines:
  default:
    - step:
        name: Security Scan
        image: node:20
        script:
          - npm install -g @appaudix/cli
          - appaudix scan app-release.apk --fail-on high
        after-script:
          - appaudix report $(cat scan_id.txt) --format pdf --output security-report.pdf