Continuous security
from your CI.

# Run a security scan against any domain you control.
curl -X POST 'https://api.jandgstudios.fun/v1/scan' \
  -H 'Authorization: Bearer $ROMP_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{"domain": "example.com"}'

const res = await fetch('https://api.jandgstudios.fun/v1/scan', {
  method: 'POST',
  headers: {
    'Authorization': `Bearer ${process.env.ROMP_API_KEY}`,
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({ domain: 'example.com' }),
});
const report = await res.json();
console.log(report.grade); // 'A'

import os, requests

r = requests.post(
    'https://api.jandgstudios.fun/v1/scan',
    headers={'Authorization': f'Bearer {os.environ["ROMP_API_KEY"]}'},
    json={'domain': 'example.com'},
)
print(r.json()['grade'])  # 'A'

# .github/workflows/security.yml
name: Security check
on: [push]
jobs:
  scan:
    runs-on: ubuntu-latest
    steps:
      - name: Run Romp scan
        run: |
          GRADE=$(curl -s -X POST https://api.jandgstudios.fun/v1/scan \
            -H "Authorization: Bearer ${{ secrets.ROMP_API_KEY }}" \
            -d '{"domain": "example.com"}' | jq -r .grade)
          [ "$GRADE" = "A" ] || exit 1