Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.strix.ai/llms.txt

Use this file to discover all available pages before exploring further.

Integrate Strix into your GitHub workflow to catch vulnerabilities before they reach production.

​
Basic Workflow

.github/workflows/security.yml
name: Security Scan

on:
  pull_request:

jobs:
  strix-scan:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Install Strix
        run: curl -sSL https://strix.ai/install | bash

      - name: Run Security Scan
        env:
          STRIX_LLM: ${{ secrets.STRIX_LLM }}
          LLM_API_KEY: ${{ secrets.LLM_API_KEY }}
        run: strix -n -t ./ --scan-mode quick

​
Required Secrets

Add these secrets to your repository:
SecretDescription
STRIX_LLMModel name (e.g., openai/gpt-5.4)
LLM_API_KEYAPI key for your LLM provider

​
Exit Codes

The workflow fails when vulnerabilities are found:
CodeResult
0Pass — No vulnerabilities
2Fail — Vulnerabilities found

​
Scan Modes for CI

ModeDurationUse Case
quickMinutesEvery PR
standard~30 minNightly builds
deep1-4 hoursRelease candidates
Use quick mode for PRs to keep feedback fast. Schedule deep scans nightly.
For pull_request workflows, Strix automatically uses changed-files diff-scope in CI/headless runs. If diff resolution fails, ensure full history is fetched (fetch-depth: 0) or set --diff-base.