Real-world examples using SecScore

[cassiodeveloper]

If you're experimenting with SecScore, this thread is a place to share real-world usage examples.

Some things that could be interesting to see:

• CI/CD setups integrating SecScore
• Example policies used in production
• How teams combine different scanners (CodeQL, Semgrep, Snyk, etc.)
• How SecScore affects developer workflows

Example integration:

Scanner → SARIF → SecScore → PR decision

CodeQL → SARIF
Semgrep → SARIF
Snyk → SARIF

SecScore aggregates the results and decides whether a Pull Request should PASS, require REVIEW, or FAIL.

If you're using SecScore, feel free to share:

• Your CI setup
• Your policy configuration
• Lessons learned