Integrations¶

Let Feluda sweep every pull request, nightly build, and remote repo so the detective never sleeps on compliance.

Overview¶

Feluda integrates seamlessly with CI/CD platforms to automate license compliance checks, SBOM generation, and badge updates. Set it once and let every commit trigger a thorough dependency audit.

Supported Platforms¶

Platform	Integration Method
GitHub Actions	Official Feluda Action (`anistark/feluda@v1`)
GitHub Advanced Security	`--ci-format sarif` → upload via `github/codeql-action/upload-sarif`
Jenkins	Shell commands with `--ci-format jenkins`
Claude Code	`feluda` skill via AgentHub — auto-runs on dep changes, inline warnings
VS Code Problems panel	`--ci-format sarif` → open SARIF file with the SARIF Viewer extension
GitLab CI	Shell commands with standard output
Other CI/CD	Direct CLI invocation

Quick Start¶

GitHub Actions (recommended):

- uses: anistark/feluda@v1
  with:
    fail-on-restrictive: true
    fail-on-incompatible: true

Claude Code:

/plugin install feluda@agenthub

Jenkins:

feluda --ci-format jenkins --fail-on-restrictive --fail-on-incompatible

Generic CI:

feluda --fail-on-restrictive --fail-on-incompatible

CI Output Formats¶

Feluda adjusts its output to match the CI platform’s annotation system.

# GitHub Actions annotations
feluda --ci-format github

# Jenkins log markers (JUnit XML)
feluda --ci-format jenkins

# SARIF 2.1.0 for GitHub Advanced Security and VS Code
feluda --ci-format sarif --output-file results.sarif

Full Compliance Workflow¶

Automate the complete compliance artifact generation:

# Run scan with CI formatting
feluda --ci-format github --fail-on-restrictive --fail-on-incompatible

# Generate attribution files
echo "1" | feluda generate  # NOTICE
echo "2" | feluda generate  # THIRD_PARTY_LICENSES

# Generate SBOMs
feluda sbom spdx --output sbom.spdx.json
feluda sbom cyclonedx --output sbom.cyclonedx.json

# Validate SBOMs
feluda sbom validate sbom.spdx.json --output sbom-spdx-validation.txt
feluda sbom validate sbom.cyclonedx.json --output sbom-cyclonedx-validation.txt