אינטגרציית GitHub

name: AI Shield Security Scan

on:
  push:
    branches: [ main, develop ]
  pull_request:
    branches: [ main ]

jobs:
  scan:
    runs-on: ubuntu-latest
    
    steps:
    - uses: actions/checkout@v4
    
    - name: Setup Python
      uses: actions/setup-python@v5
      with:
        python-version: '3.11'
    
    - name: Run AI Shield Scanner
      env:
        AI_SHIELD_API_KEY: ${{ secrets.AI_SHIELD_API_KEY }}
      run: |
        pip install ai-shield-scanner
        ai-shield scan . --output results.json
    
    - name: Upload Results
      uses: actions/upload-artifact@v4
      with:
        name: scan-results
        path: results.json
    
    - name: Comment on PR
      if: github.event_name == 'pull_request'
      uses: ai-shield/comment-action@v1
      with:
        token: ${{ secrets.GITHUB_TOKEN }}
        results: results.json