Skip to main content
Add the CodeAnt AI security report badge to your website to give customers and prospects a direct way to request the latest security audit report for a public repository. Visitors do not need a CodeAnt AI account. After they select the badge, they enter their name, company, and corporate email address. CodeAnt AI verifies that the repository is public and has current scan data, then sends the request to the organization’s admins for approval. The report is emailed only after an admin approves the request.

​
Embed the badge

Replace YOUR_ORG and YOUR_REPO in the following HTML, then add it to your website:
For example, a repository at https://github.com/acme/widgets uses:
For a self-hosted GitLab repository at https://gitlab.example.com/acme/widgets, include the provider base URL. This keeps its report separate from a repository with the same path on GitLab.com:
URL-encode parameter values if they contain spaces or reserved URL characters.

​
Request and approval flow

  1. A visitor opens the badge link and submits their name, company, and corporate email address. The request page confirms that the report is awaiting approval. No report email is sent yet.
  2. An admin of the repository’s organization sees a pending count on the account button in CodeAnt AI. Open the account menu and select Report approvals to review requests. The page shows when each request was made, the requester’s name and email, the repository, and its status.
  3. Select Approve to prepare the repository-scoped PDF and email a secure download link to the requester. Select Deny to close the request without sending a report. The page shows when an approved report is being prepared, has been emailed, or failed to deliver. If delivery fails, select Retry delivery.
Admins receive the pending count in the app; the request does not send them a notification email. The count appears when the app loads and updates while the app is open.

​
Eligibility and delivery

  • The repository must be public and already have current CodeAnt AI security scan data.
  • The requester must provide a corporate email address. Public and disposable email providers, including Gmail, are not eligible.
  • After an admin approves the request, CodeAnt AI emails a secure, direct link to the repository-scoped PDF report. The link expires after 24 hours.
  • Requests are limited to five per IP address, with one request added back to the allowance every 12 minutes.
The report includes a security summary and available SAST, infrastructure-as-code, secret metadata, SCA, and SBOM details. Plaintext secret values are never included.