CI/CD & IDE integrations

# .github/workflows/boringsec.yml
name: Security Scan
on: [push, pull_request]

jobs:
  scan:
    runs-on: ubuntu-latest
    steps:
      - name: Run BoringSec
        env:
          BORINGSEC_API_KEY: ${{ secrets.BORINGSEC_API_KEY }}
        run: |
          JOB=$(curl -fsS -X POST https://www.boringsec.com/api/v1/scan \
            -H "Authorization: Bearer $BORINGSEC_API_KEY" \
            -H "Content-Type: application/json" \
            -d '{"url": "${{ vars.APP_URL }}", "async": true}')

          SCAN_ID=$(echo "$JOB" | jq -r '.scan.id')
          STATUS=PENDING
          POLL_DELAY=1
          DEADLINE=$((SECONDS + 600))
          while [ "$SECONDS" -lt "$DEADLINE" ]; do
            REMAINING=$((DEADLINE - SECONDS))
            WAIT_SECONDS=$POLL_DELAY
            if [ "$WAIT_SECONDS" -gt "$REMAINING" ]; then WAIT_SECONDS=$REMAINING; fi
            sleep "$WAIT_SECONDS"

            STATUS_JSON=$(curl -fsS \
              -H "Authorization: Bearer $BORINGSEC_API_KEY" \
              "https://www.boringsec.com/api/v1/scans/$SCAN_ID/status")
            STATUS=$(echo "$STATUS_JSON" | jq -r '.scan.status')
            if [ "$STATUS" = "COMPLETED" ]; then break; fi
            if [ "$STATUS" = "FAILED" ]; then
              echo "$STATUS_JSON" | jq .
              exit 1
            fi
            POLL_DELAY=$((POLL_DELAY * 2))
            if [ "$POLL_DELAY" -gt 15 ]; then POLL_DELAY=15; fi
          done

          if [ "$STATUS" != "COMPLETED" ]; then
            echo "::error::BoringSec scan did not finish before the CI deadline"
            echo "Scan ID: $SCAN_ID"
            echo "Resume: https://www.boringsec.com/api/v1/scans/$SCAN_ID/status"
            echo "Result: https://www.boringsec.com/api/v1/scans/$SCAN_ID"
            exit 1
          fi

          RESULT=$(curl -fsS \
            -H "Authorization: Bearer $BORINGSEC_API_KEY" \
            "https://www.boringsec.com/api/v1/scans/$SCAN_ID")
          SCORE=$(echo "$RESULT" | jq '.scan.score')
          SCORE_DISPLAY="$SCORE/100"
          if [ "$SCORE" = "null" ]; then SCORE_DISPLAY="not assessable"; fi
          CRITICALS=$(echo "$RESULT" | jq '[.scan.issues[] | select(.severity=="CRITICAL")] | length')

          echo "Score: $SCORE_DISPLAY | Criticals: $CRITICALS"

          if [ "$CRITICALS" -gt 0 ]; then
            echo "::error::Critical vulnerabilities found!"
            exit 1
          fi

POST /api/v1/generate-rules
{ "format": "both", "stack": "nextjs-supabase" }