Setup guide

From zero to CI/CD
in under 5 minutes

No YAML expertise required. One command installs everything. Your next pull request gets a full compliance report automatically.

~5 minutes end-to-end
1
Account
2
Trial
3
API Key
4
Install
5
First PR
1
Create your account
Google OAuth or email — takes 30 seconds
Current

Sign in with Google or create an email account. No credit card at this step — billing only starts after your 14-day free trial ends.

Create Account → Already have an account? Sign in
If you already have an account, click "Sign in" and you'll be redirected back here automatically.
2
Start your 14-day free trial
Choose Starter ($99/mo) or Growth ($299/mo) — no charge for 14 days
To do

Pick a plan based on how many repos you want to monitor. You can change plans at any time from the dashboard. You won't be charged until the trial ends — cancel before then and you owe nothing.

Starter — 3 repos, 3 seats, full fix guides · $99/mo after trial
Growth — 10 repos, 10 seats, CI/CD blocking, all jurisdictions · $299/mo after trial
Choose a Plan →
3
Get your API key
Auto-generated in your dashboard — takes one click
To do

Your API key is generated automatically when you first open your dashboard after subscribing. Go to Settings → API Key to copy it.

your api key
Loading your key…
Open Dashboard →
Keep this key private. If it's ever exposed in a commit, rotate it immediately from the dashboard. The lga_ prefix lets GitHub's secret scanner detect and alert you automatically.
4
Install in your repo — one command
Adds the workflow file and sets the GitHub secret automatically
To do

Run this from the root of your repository. The script creates .github/workflows/legaudit-scan.yml and — if you have the GitHub CLI installed — sets the LEGAUDIT_API_KEY secret automatically.

terminal — run in your repo root
$ curl -fsSL https://legaudit-adbb6.web.app/install.sh \ | bash -s YOUR_API_KEY
No GitHub CLI? The script will print a direct link to your repo's Secrets page with instructions. Takes about 60 extra seconds.

After running, you should see output like:

expected output
✓ Workflow saved to .github/workflows/legaudit-scan.yml ✓ LEGAUDIT_API_KEY secret set via GitHub CLI ✓ Committed .github/workflows/legaudit-scan.yml All done! Push and open a pull request — LegAudit will scan it automatically.
5
Open your first pull request
LegAudit posts a compliance report as a PR comment automatically
To do

Push a branch and open a PR against main. The action runs in parallel with your other checks — typically 15–45 seconds. You'll see a comment like this:

Pull Request #42 — add user analytics
🟡 LegAudit Compliance Scan — Needs attention Score: 61/100  |  Critical: 0  |  High: 2  |  Medium: 1 > Analytics SDK added without GPC signal check; personal data stored without deletion handler. ▸ View 3 finding(s) --- 🔴 Critical 🟠 High 🟢 Pass Powered by LegAudit · AI-powered compliance scanning
Want to block merges on critical findings? Open .github/workflows/legaudit-scan.yml and uncomment the "Block on critical findings" step at the bottom.
View Dashboard → Read the FAQ