Generic CI Providers

Docs > Code Analysis > Software Composition Analysis > Generic CI Providers

Try the Beta!

Code Analysis is in public beta.

Overview

If you don’t use GitHub Actions, you can run the Datadog CLI directly in your CI pipeline platform.

Prerequisites:

unzip
Node.js 14 or later

Configure the following environment variables:

Name	Description	Required	Default
`DD_API_KEY`	Your Datadog API key. This key is created by your Datadog organization and should be stored as a secret.	Yes
`DD_APP_KEY`	Your Datadog application key. This key is created by your Datadog organization and should be stored as a secret.	Yes
`DD_SITE`	The Datadog site to send information to. Your Datadog site is .	No	`datadoghq.com`

Provide the following inputs:

Name	Description	Required	Default
`service`	The name of the service to tag the results with.	Yes
`env`	The environment to tag the results with. `ci` is a helpful value for this input.	No	`none`
`subdirectory`	The subdirectory path the analysis should be limited to. The path is relative to the root directory of the repository.	No

# Set the Datadog site to send information to
export DD_SITE=""
                        
# Install dependencies
npm install -g @datadog/datadog-ci

# Download the latest Datadog OSV Scanner:
# https://github.com/DataDog/osv-scanner/releases
DATADOG_OSV_SCANNER_URL=https://github.com/DataDog/osv-scanner/releases/latest/download/osv-scanner_linux_amd64.zip

# Install OSV Scanner
mkdir /osv-scanner
curl -L -o /osv-scanner/osv-scanner.zip $DATADOG_OSV_SCANNER_URL
cd /osv-scanner && unzip osv-scanner.zip
chmod 755 /osv-scanner/osv-scanner

# Output OSC Scanner results
/osv-scanner/osv-scanner --skip-git -r --experimental-only-packages --format=cyclonedx-1-5 --paths-relative-to-scan-dir  --output=/tmp/sbom.json /path/to/repository

# Upload results
datadog-ci sbom upload --service "my-app" --env "ci" /tmp/sbom.json

Generic CI Providers

Try the Beta!

Overview

Further Reading