Get your API key

curl https://poc-backend.amdal-dev.workers.dev/api/audit \
  -H "Authorization: Bearer sk_commit_YOUR_KEY_HERE" \
  -H "Content-Type: application/json" \
  -d '{"name": "axios", "registry": "npm"}'

const res = await fetch(
  'https://poc-backend.amdal-dev.workers.dev/api/audit',
  {
    method: 'POST',
    headers: {
      'Authorization': 'Bearer sk_commit_YOUR_KEY_HERE',
      'Content-Type': 'application/json',
    },
    body: JSON.stringify({ name: 'axios', registry: 'npm' }),
  }
);
const data = await res.json();
console.log(data.score); // 0–100 trust score

- name: Commit supply chain audit
  uses: actions/github-script@v7
  env:
    COMMIT_API_KEY: ${{ secrets.COMMIT_API_KEY }}
  with:
    script: |
      const res = await fetch('https://poc-backend.amdal-dev.workers.dev/api/audit', {
        method: 'POST',
        headers: {
          'Authorization': `Bearer ${process.env.COMMIT_API_KEY}`,
          'Content-Type': 'application/json',
        },
        body: JSON.stringify({ name: 'lodash', registry: 'npm' }),
      });
      const { score } = await res.json();
      if (score < 40) core.setFailed(`Low trust score: ${score}`);