Skip to main content
Menu
On this page

Get your first Plumber Score

Plumber scans your CI/CD pipelines for security problems and grades them from A to E. Two steps to your first score:

1. Install

On macOS and Linux, with Homebrew:

Terminal window
brew tap getplumber/plumber
brew install plumber

No Homebrew? All install methods →

2. Get your first score

Authenticate with your provider:

  • GitHub (details):
    • already logged in with the gh CLI? Nothing to do, Plumber finds it automatically
    • otherwise set GH_TOKEN
  • GitLab: set GITLAB_TOKEN (details)

Then run from any repo that has GitHub Actions workflows or a .gitlab-ci.yml:

Terminal window
cd path/to/your/repo
plumber analyze

3. Go further

Gate your CI
Add Plumber to GitHub Actions or the GitLab CI component and block pipelines below your minimum score.
GitHub Actions →GitLab CI →
Understand your score
How the A to E grade and the points system work.
Plumber Score →
Tune the controls
One .plumber.yaml that extends the baseline with just what you change. See every control in the catalog.
Configuration →Controls catalog →
Monitor at scale
The self-hosted Plumber Platform: dashboards, issue lifecycle, team roles, always-on auditing.
Platform installation →

4. Community & support