GitHub Actions

Store the organization ID and pipeline token as GitHub Actions secrets. Configure the CLI profile with the public JustScan HTTPS URL and target organization ID. For an image built in the runner's Docker daemon, use the CLI local-image mode so the image does not need to be pushed before scanning.

- name: Scan image with JustScan
  env:
    JUSTSCAN_TOKEN: ${{ secrets.JUSTSCAN_TOKEN }}
  run: justscan scan --local my-app:${{ github.sha }}

Set the JustScan URL and organization ID in the selected CLI profile or environment. Do not print access tokens in workflow logs. Make the job required only after confirming the expected policy fail and operational error behavior with a representative image.