Run Blekline in CI so agent configs and cluster posture cannot merge silently. The default is fail the job — do not set continue-on-error unless you are explicitly collecting a baseline.
Ingress / MCP gate (every repo)
Copy ci/github-actions/blekline-gate.yml.example to .github/workflows/blekline-gate.yml.
- Add repository secret
BLEKLINE_WORKSPACE_TOKEN(blw_...). Optional:BLEKLINE_API_URL. - The workflow installs packages, runs
verify:integrations, and optionallydemo:mcp-smokewhen the secret is present.
pnpm build:packages
pnpm verify:integrations
Full template notes: CI/CD.
NHIM cluster gate (platform teams)
Block merges when Kubernetes agent infrastructure drops below posture:
- uses: Blekline/blekline-oss/ci/github-actions/nhim-audit@main
with:
kubeconfig: ${{ secrets.KUBECONFIG }}
profile: generic
fail-on: high
min-score: "75"
Details, RBAC, SARIF, and exit codes: [CI NHIM gate](/docs/deploy/ci-nhim-gate) · [NHIM audit quickstart](/docs/get-started/nhim-audit-quickstart).
Local 60-second check
export BLEKLINE_WORKSPACE_TOKEN="blw_..."
export BLEKLINE_API_URL="https://app.blekline.com"
export BLEKLINE_CLIENT_SURFACE="sdk"
npx -y @blekline/mcp-server
No clone required. Contributors who need the full repo can follow blekline-oss.
Next: Choose your path · MCP server · [Eval journey](/docs/get-started/eval-journey) · Open workspace