> ## Documentation Index
> Fetch the complete documentation index at: https://docs.roboticks.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Integrations

> GitHub App, ReqIF connectors for Jama/Polarion/codeBeamer/DOORS, BYO connectors for LDRA/Polyspace/Coverity, bundled OSS scanners, notification connectors for Slack/PagerDuty/Email/Webhooks.

# Integrations

Roboticks plugs into the parts of your toolchain that need to participate in the V-model: the SCM that hosts your code, the requirements-management tool that owns the spec, the static-analysis tools you've already licensed, and the notification surfaces your team watches.

## Inventory

<CardGroup cols={2}>
  <Card title="GitHub App" icon="github" href="/github-app/installation">
    **The #1 integration.** Webhook-driven test runs, Check Runs on every PR, OIDC for the CLI. Free across tiers.
  </Card>

  <Card title="BYO test-result ingest" icon="upload" href="/cli/ci-cd#byo-ingest">
    Post JUnit-with-confirms XML, MCAP bags, and SARIF 2.1.0 reports straight from your own CI. **Free on every tier** — no per-connector fee.
  </Card>

  <Card title="Requirements (ReqIF)" icon="file-import">
    [Jama](/integrations/jama), [Polarion](/integrations/polarion), [codeBeamer](/integrations/codebeamer), [DOORS](/integrations/doors). Round-trip via the OMG ReqIF standard. \$149 / connector / month — this is the paid wedge.
  </Card>

  <Card title="BYO static-analysis" icon="microscope">
    [LDRA](/integrations/ldra), [Polyspace](/integrations/polyspace), [Coverity](/integrations/coverity). \$149/connector/month — you bring the license, we ingest the findings.
  </Card>

  <Card title="Bundled OSS scanners" icon="shield-check" href="/integrations/oss-scanners">
    cppcheck, clang-tidy, Bandit, Semgrep, trivy, syft. Included in paid tiers, no extra charge.
  </Card>

  <Card title="Notifications" icon="bell">
    [Slack](/integrations/slack), [PagerDuty](/integrations/pagerduty), [Email](/integrations/email), [Webhooks](/integrations/webhooks).
  </Card>

  <Card title="SBOM ingest" icon="boxes-stacked" href="/integrations/sbom">
    SPDX and CycloneDX SBOMs land in evidence packs.
  </Card>
</CardGroup>

<Note>
  **The paid wedge is the requirements side, not the test-result side.** Posting JUnit / MCAP / SARIF from your own CI is free; the BYO connector fee covers the vendor catalog (Jama, Polarion, codeBeamer, DOORS, LDRA, Polyspace, Coverity) where Roboticks maintains the parser and the round-trip.
</Note>

## How integrations relate to the platform

```mermaid theme={null}
%%{init: {"theme": "neutral", "themeVariables": {"primaryColor": "#4040ff"}} }%%
flowchart LR
    subgraph IN["Inputs"]
      GH["GitHub App"]
      RM["Jama / Polarion /<br/>codeBeamer / DOORS"]
      SA["LDRA / Polyspace /<br/>Coverity / SARIF tools"]
      OSS["Bundled OSS<br/>scanners"]
      SBOM["SPDX / CycloneDX"]
    end

    subgraph CORE["Roboticks"]
      Req["Requirements engine"]
      Trace["Traceability"]
      Ev["Evidence pack"]
    end

    subgraph OUT["Outputs"]
      Slack["Slack"]
      PD["PagerDuty"]
      Email["Email"]
      WH["Webhooks"]
    end

    GH --> CORE
    RM --> Req
    SA --> Trace
    OSS --> Trace
    SBOM --> Ev
    CORE --> Slack
    CORE --> PD
    CORE --> Email
    CORE --> WH
```

## What each category is for

### GitHub App

Your developers push code; the GitHub App posts a Roboticks Check Run on every PR with the coverage delta. Required for the smooth GitHub-native experience. Cross-link: [GitHub App overview](/github-app/installation).

### Requirements connectors (ReqIF)

The OMG ReqIF standard is the lingua franca for requirements interchange. Roboticks reads and writes ReqIF, so requirements authored in Jama, Polarion, codeBeamer, or DOORS round-trip without lock-in.

| Tool                         | Page                                   |
| ---------------------------- | -------------------------------------- |
| Jama Connect                 | [Jama](/integrations/jama)             |
| Polarion ALM                 | [Polarion](/integrations/polarion)     |
| codeBeamer                   | [codeBeamer](/integrations/codebeamer) |
| IBM DOORS (Classic and Next) | [DOORS](/integrations/doors)           |

A generic [ReqIF guide](/integrations/sarif) covers the format details.

### BYO static-analysis tool connectors

If your team has licensed LDRA, Polyspace, or Coverity, Roboticks ingests their reports and surfaces findings in the traceability matrix and evidence pack. **\$149 / connector / month.** You keep your tool license — we link the findings.

| Tool                                          | Page                                 |
| --------------------------------------------- | ------------------------------------ |
| LDRA Testbed (MISRA, coverage)                | [LDRA](/integrations/ldra)           |
| MathWorks Polyspace (Code Prover, Bug Finder) | [Polyspace](/integrations/polyspace) |
| Black Duck Coverity                           | [Coverity](/integrations/coverity)   |

For any tool that emits **SARIF 2.1.0** (Bandit, Semgrep, CodeQL, Snyk, etc.), use the generic [SARIF ingest guide](/integrations/sarif).

### Bundled OSS scanners

Paid tiers ship with these scanners pre-wired. Enable them per-project; output lands in the matrix and evidence pack at no extra charge.

| Scanner    | Domain                            |
| ---------- | --------------------------------- |
| cppcheck   | C/C++ static analysis             |
| clang-tidy | C/C++ lint                        |
| Bandit     | Python security                   |
| Semgrep    | Multi-language patterns           |
| trivy      | Container/image vuln scanning     |
| syft       | SBOM generation (CycloneDX, SPDX) |

Full list and per-tool config at [OSS scanners](/integrations/oss-scanners).

### Notification connectors

When something interesting happens — test failure, requirement gap appears, evidence pack ready, pinned standard amended — these route the event to your team's preferred surface.

| Channel   | Trigger types it shines for          | Page                                 |
| --------- | ------------------------------------ | ------------------------------------ |
| Slack     | All — real-time visibility           | [Slack](/integrations/slack)         |
| PagerDuty | Critical-only — on-call escalation   | [PagerDuty](/integrations/pagerduty) |
| Email     | Digests, off-hours notifications     | [Email](/integrations/email)         |
| Webhooks  | Custom routing into your own systems | [Webhooks](/integrations/webhooks)   |

### SBOM ingest

Software Bills of Material in SPDX or CycloneDX land in evidence packs to satisfy supply-chain requirements (CRA, EU MR Annex IV.6). See [SBOM](/integrations/sbom) and the [OpenSSF SBOM reference](https://www.cisa.gov/sbom).

### The SARIF lingua franca for findings

Roboticks ingests **SARIF 2.1.0** for any tool that emits it — that's the path for arbitrary security and static-analysis tools beyond the named connectors. See [SARIF ingest](/integrations/sarif).

## Setup pattern

Most integrations follow the same shape:

1. **Settings → Integrations** in the dashboard.
2. Pick the integration, click **Add**.
3. For OAuth (Slack, GitHub) — approve in the third-party UI.
4. For credential-based (PagerDuty key, Webhook URL) — paste and save.
5. For BYO connectors (LDRA, Polyspace, Coverity) — also confirm the \$149/connector line on your plan.
6. Pick which event types route to this connector.
7. Hit **Test** to send a sample.

## Event types

These are the events that integrations can subscribe to:

| Event                          | Fires when                                                                     |
| ------------------------------ | ------------------------------------------------------------------------------ |
| `test_run.completed`           | A test run reaches a terminal state (pass or fail)                             |
| `requirement.gap_opened`       | A requirement transitions from confirmed → uncovered or stale                  |
| `evidence_pack.generated`      | An evidence pack is sealed for a release                                       |
| `standard.amendment_published` | A pinned standard receives an amendment (Standards-feed subscription required) |
| `runner_pool.offline`          | A self-hosted pool's last `ONLINE` runner heartbeats out                       |

Each connector page documents which events it supports and what the rendered notification looks like.

## Tier matrix

|                                                         | Free | Team                        | Enterprise |
| ------------------------------------------------------- | ---- | --------------------------- | ---------- |
| GitHub App                                              | ✓    | ✓                           | ✓          |
| Slack / Email / Webhooks                                | ✓    | ✓                           | ✓          |
| PagerDuty                                               | —    | ✓                           | ✓          |
| ReqIF connectors (Jama / Polarion / codeBeamer / DOORS) | —    | 3 included, **\$149/extra** | Bundled    |
| BYO static analysis (LDRA / Polyspace / Coverity)       | —    | \$149 / connector / month   | Bundled    |
| OSS scanners (cppcheck, etc.)                           | —    | ✓                           | ✓          |
| SBOM ingest (SPDX / CycloneDX)                          | —    | ✓                           | ✓          |
| SARIF 2.1.0 ingest                                      | —    | ✓                           | ✓          |

See [Pricing](/pricing) for the canonical rate card.