From 95786b3b3de037669b2e2e0e7ccee9b155df0a0f Mon Sep 17 00:00:00 2001
From: Jude Pereira <judebpereira@gmail.com>
Date: Sun, 16 Nov 2025 11:15:16 +0100
Subject: [PATCH 1/2] Add Blue Cave CI workflow

---
 .github/workflows/bluecave.yml | 41 ++++++++++++++++++++++++++++++++++
 README.md                      |  6 ++++-
 pom.xml                        | 10 ++++++---
 3 files changed, 53 insertions(+), 4 deletions(-)
 create mode 100644 .github/workflows/bluecave.yml

diff --git a/.github/workflows/bluecave.yml b/.github/workflows/bluecave.yml
new file mode 100644
index 0000000000..c22f28d57c
--- /dev/null
+++ b/.github/workflows/bluecave.yml
@@ -0,0 +1,41 @@
+name: Blue Cave
+
+on:
+  push:
+    branches:
+      - master
+  pull_request:
+
+jobs:
+  bluecave-report:
+    runs-on: ubuntu-22.04
+    if: (github.actor != 'dependabot[bot]')
+    permissions:
+      contents: read
+    steps:
+      - name: Setup Bolt
+        uses: koalalab-inc/bolt@v1
+
+      - uses: actions/checkout@v2
+      - uses: actions/setup-java@v2
+        with:
+          distribution: "adopt"
+          java-version: "8"
+          architecture: x64
+      - name: Setup Protoc
+        uses: arduino/setup-protoc@v3
+        with:
+          version: "29.2"
+      - uses: bufbuild/buf-action@v1
+        with:
+          setup_only: true
+
+      - name: Run Tests
+        run: mvn --no-transfer-progress -B test
+
+      - name: Analyze and Report Coverage to Blue Cave
+        continue-on-error: true
+        env:
+          BLUECAVE_TOKEN: ${{ secrets.BLUECAVE_TOKEN }}
+          PR_SHA: ${{ github.event.pull_request.head.sha }}
+        run: mvn -B bluecave:report
diff --git a/README.md b/README.md
index 7325989549..6754c7ad58 100644
--- a/README.md
+++ b/README.md
@@ -15,7 +15,11 @@
 <br/> 
 <a href="https://github.com/akto-api-security/akto/commits/master" _target="blank">
   <img src="https://img.shields.io/github/commit-activity/m/akto-api-security/akto?label=commits&logo=github"/>
-</a>  
+</a>
+
+<a href="https://cloud.bluecave.io/projects/gh/akto-api-security/akto" target="_blank">
+  <img src="https://cloud.bluecave.io/badges/gh/akto-api-security/akto/analysis.svg"/>
+</a>
 
 <a href="https://github.com/akto-api-security/akto/releases" _target="blank">
   <img src="https://img.shields.io/github/release-date/akto-api-security/akto?label=latest%20release&logo=docker"/>
diff --git a/pom.xml b/pom.xml
index f25cfc1e2b..3a45bfc812 100644
--- a/pom.xml
+++ b/pom.xml
@@ -42,7 +42,11 @@
 
     <build>
         <plugins>
-
+            <plugin>
+                <groupId>io.bluecave</groupId>
+                <artifactId>bluecave-maven-plugin</artifactId>
+                <version>0.1.3</version>
+            </plugin>
             <plugin>
                 <groupId>org.codehaus.mojo</groupId>
                 <artifactId>flatten-maven-plugin</artifactId>
@@ -94,8 +98,8 @@
 					</execution>
 					<execution>
 						<id>report</id>
-						<phase>prepare-package</phase>
-						<goals>
+                        <phase>prepare-package</phase>
+                        <goals>
 							<goal>report</goal>
 						</goals>
 					</execution>

From ff0b668f318a72ed6914f29f9079d84b4c94ebf2 Mon Sep 17 00:00:00 2001
From: Jude Pereira <contact@judepereira.com>
Date: Sun, 16 Nov 2025 13:33:41 +0100
Subject: [PATCH 2/2] Add read permission for top level.

---
 .github/workflows/bluecave.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/bluecave.yml b/.github/workflows/bluecave.yml
index c22f28d57c..1aeef49a61 100644
--- a/.github/workflows/bluecave.yml
+++ b/.github/workflows/bluecave.yml
@@ -6,6 +6,9 @@ on:
       - master
   pull_request:
 
+permissions:
+    contents: read
+
 jobs:
   bluecave-report:
     runs-on: ubuntu-22.04