Integrations

Premium

Connect CodePhreak to your issue trackers and notification systems. Auto-create tickets, send Slack alerts, and reduce manual work.

Supported Integrations

GitHub Issues

Create issues with severity labels and formatted descriptions

Jira

Create tickets with priority mapping to Jira projects

Linear

Create issues via GraphQL with priority levels

Slack

Send scan summaries and critical alerts via webhooks

Configuration

Configure integrations via environment variables:

# GitHub
export GITHUB_TOKEN=<your-personal-access-token>
export GITHUB_OWNER=<organization-or-username>
export GITHUB_REPO=<repository-name>

# Jira
export JIRA_URL=https://company.atlassian.net
export JIRA_EMAIL=<your-email>
export JIRA_TOKEN=<api-token>
export JIRA_PROJECT=<project-key>

# Linear
export LINEAR_TOKEN=<api-key>
export LINEAR_TEAM_ID=<team-id>

# Slack
export SLACK_WEBHOOK_URL=<webhook-url>

Check Configuration

$ codephreak integrations --list

    Configured Integrations     
┏━━━━━━━━━━━━━┳━━━━━━━━━━━━━━━━━┓
┃ Integration ┃ Status          ┃
┡━━━━━━━━━━━━━╇━━━━━━━━━━━━━━━━━┩
│ GitHub      │ ✅ Connected    │
│ Jira        │ ❌ Not configured│
│ Linear      │ ❌ Not configured│
│ Slack       │ ✅ Connected    │
└─────────────┴─────────────────┘

Creating Tickets

Auto-create tickets from scan results:

# Run a scan and save results
$ codephreak scan ./src --output results.json

# Preview what tickets would be created
$ codephreak create-tickets \
    --scan-file results.json \
    --integration github \
    --severity high \
    --dry-run

# Create tickets for real
$ codephreak create-tickets \
    --scan-file results.json \
    --integration github \
    --severity high

📋 Found 8 findings at high+ severity
✅ Created 8 tickets
   https://github.com/org/repo/issues/123
   https://github.com/org/repo/issues/124
   ...

Ticket Format

Created tickets include formatted security details:

[CRITICAL] SQL Injection in users.py

Severity: CRITICAL

Rule: sql-injection

Location: src/api/users.py:42

Description:

User input directly concatenated into SQL query without sanitization.

Labels:severity: criticalsecuritycodephreak

Slack Notifications

# Send scan summary to Slack
$ codephreak notify \
    --scan-file results.json \
    --title "Production Security Scan"

✅ Slack notification sent

Slack messages include severity breakdown and top critical/high findings:

🔒 Production Security Scan

Total: 42
Critical: 2
High: 5
Medium: 15

Top Critical/High:

• [CRITICAL] SQL Injection

• [CRITICAL] Hardcoded credentials

• [HIGH] XSS vulnerability

CI/CD Integration

# GitHub Actions example
- name: Security Scan
  env:
    GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
    SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK }}
  run: |
    codephreak scan . --output results.json
    
    # Create tickets for critical only
    codephreak create-tickets \
      --scan-file results.json \
      --integration github \
      --severity critical
    
    # Notify team
    codephreak notify --scan-file results.json