
Adding Trust Score Checks to Your CI/CD Pipeline
Your CI pipeline runs linters, tests, and type checkers. But it does not tell you if the AI package someone just added to requirements.txt has a trust score of 29 and two unpatched CVEs. Adding a trust score check takes five minutes and catches problems before they reach production. Here is how to add Nerq's preflight API to your CI/CD pipeline. The Preflight API Nerq exposes a simple REST endpoint for trust verification: curl "https://nerq.ai/v1/preflight?target=langchain" Response: { "target" : "langchain" , "trust_score" : 82 , "grade" : "A" , "recommendation" : "PROCEED" , "risk_level" : "low" , "known_cves" : 0 , "license" : "MIT" , "last_commit_days_ago" : 2 , "alternatives" : [], "response_time_ms" : 12.3 } No API key required. No authentication. The endpoint supports CORS and returns results in under 50ms for cached queries. For multiple packages, use the batch endpoint: curl -X POST "https://nerq.ai/v1/preflight/batch" \ -H "Content-Type: application/json" \ -d '{"targets": ["
Continue reading on Dev.to DevOps
Opens in a new tab

