Integrations
Roboticks plugs into the parts of your toolchain that need to participate in the V-model: the SCM that hosts your code, the requirements-management tool that owns the spec, the static-analysis tools you’ve already licensed, and the notification surfaces your team watches.Inventory
GitHub App
The #1 integration. Webhook-driven test runs, Check Runs on every PR, OIDC for the CLI. Free across tiers.
BYO test-result ingest
Post JUnit-with-confirms XML, MCAP bags, and SARIF 2.1.0 reports straight from your own CI. Free on every tier — no per-connector fee.
Requirements (ReqIF)
Jama, Polarion, codeBeamer, DOORS. Round-trip via the OMG ReqIF standard. $149 / connector / month — this is the paid wedge.
Bundled OSS scanners
cppcheck, clang-tidy, Bandit, Semgrep, trivy, syft. Included in paid tiers, no extra charge.
SBOM ingest
SPDX and CycloneDX SBOMs land in evidence packs.
The paid wedge is the requirements side, not the test-result side. Posting JUnit / MCAP / SARIF from your own CI is free; the BYO connector fee covers the vendor catalog (Jama, Polarion, codeBeamer, DOORS, LDRA, Polyspace, Coverity) where Roboticks maintains the parser and the round-trip.
How integrations relate to the platform
What each category is for
GitHub App
Your developers push code; the GitHub App posts a Roboticks Check Run on every PR with the coverage delta. Required for the smooth GitHub-native experience. Cross-link: GitHub App overview.Requirements connectors (ReqIF)
The OMG ReqIF standard is the lingua franca for requirements interchange. Roboticks reads and writes ReqIF, so requirements authored in Jama, Polarion, codeBeamer, or DOORS round-trip without lock-in.| Tool | Page |
|---|---|
| Jama Connect | Jama |
| Polarion ALM | Polarion |
| codeBeamer | codeBeamer |
| IBM DOORS (Classic and Next) | DOORS |
BYO static-analysis tool connectors
If your team has licensed LDRA, Polyspace, or Coverity, Roboticks ingests their reports and surfaces findings in the traceability matrix and evidence pack. $149 / connector / month. You keep your tool license — we link the findings.
For any tool that emits SARIF 2.1.0 (Bandit, Semgrep, CodeQL, Snyk, etc.), use the generic SARIF ingest guide.
Bundled OSS scanners
Paid tiers ship with these scanners pre-wired. Enable them per-project; output lands in the matrix and evidence pack at no extra charge.| Scanner | Domain |
|---|---|
| cppcheck | C/C++ static analysis |
| clang-tidy | C/C++ lint |
| Bandit | Python security |
| Semgrep | Multi-language patterns |
| trivy | Container/image vuln scanning |
| syft | SBOM generation (CycloneDX, SPDX) |
Notification connectors
When something interesting happens — test failure, requirement gap appears, evidence pack ready, pinned standard amended — these route the event to your team’s preferred surface.SBOM ingest
Software Bills of Material in SPDX or CycloneDX land in evidence packs to satisfy supply-chain requirements (CRA, EU MR Annex IV.6). See SBOM and the OpenSSF SBOM reference.The SARIF lingua franca for findings
Roboticks ingests SARIF 2.1.0 for any tool that emits it — that’s the path for arbitrary security and static-analysis tools beyond the named connectors. See SARIF ingest.Setup pattern
Most integrations follow the same shape:- Settings → Integrations in the dashboard.
- Pick the integration, click Add.
- For OAuth (Slack, GitHub) — approve in the third-party UI.
- For credential-based (PagerDuty key, Webhook URL) — paste and save.
- For BYO connectors (LDRA, Polyspace, Coverity) — also confirm the $149/connector line on your plan.
- Pick which event types route to this connector.
- Hit Test to send a sample.
Event types
These are the events that integrations can subscribe to:| Event | Fires when |
|---|---|
test_run.completed | A test run reaches a terminal state (pass or fail) |
requirement.gap_opened | A requirement transitions from confirmed → uncovered or stale |
evidence_pack.generated | An evidence pack is sealed for a release |
standard.amendment_published | A pinned standard receives an amendment (Standards-feed subscription required) |
runner_pool.offline | A self-hosted pool’s last ONLINE runner heartbeats out |
Tier matrix
| Free | Team | Enterprise | |
|---|---|---|---|
| GitHub App | ✓ | ✓ | ✓ |
| Slack / Email / Webhooks | ✓ | ✓ | ✓ |
| PagerDuty | — | ✓ | ✓ |
| ReqIF connectors (Jama / Polarion / codeBeamer / DOORS) | — | 3 included, $149/extra | Bundled |
| BYO static analysis (LDRA / Polyspace / Coverity) | — | $149 / connector / month | Bundled |
| OSS scanners (cppcheck, etc.) | — | ✓ | ✓ |
| SBOM ingest (SPDX / CycloneDX) | — | ✓ | ✓ |
| SARIF 2.1.0 ingest | — | ✓ | ✓ |