feat(ci): add CI/CD integration — --fail-on, --compact, pipeline templates

Add threshold-based exit codes (--fail-on <severity>) and compact
output mode (--compact) to scan-orchestrator and CLI. Pipeline
templates for GitHub Actions, Azure DevOps, GitLab CI with SARIF
upload. CI/CD guide with Schrems II/NSM compliance documentation.
npm publish preparation (files whitelist, .npmignore). Policy ci
section for distributable CI defaults. Version 6.1.0.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
Kjell Tore Guttormsen 2026-04-10 14:59:05 +02:00
commit 2c33e9cc64
15 changed files with 599 additions and 17 deletions

View file

@ -17,9 +17,10 @@ const USAGE = `llm-security v${PKG.version} — AI security scanning for Claude
Usage: llm-security <command> [options]
Commands:
scan <target> [--format sarif] [--baseline] [--save-baseline]
scan <target> [--fail-on <critical|high|medium|low>] [--compact]
[--format sarif] [--output-file <path>] [--baseline] [--save-baseline]
Run deterministic deep-scan (10 scanners)
deep-scan <target> [--format sarif] [--baseline] [--save-baseline]
deep-scan <target>
Alias for scan
posture <target>
Quick security posture assessment (16 categories)