Applications connect to GitHub repositories and use a GitHub credential. The generated CI/CD pipeline pushes the container image to GitHub Container Registry (GHCR) and publishes the Helm chart as an OCI artifact.
How it works
Connect a repository
Provide a name, a GitHub credential, and the repo owner, name, and branch (defaults to
main).Analyze and generate
Ankra inspects the repository, detects the language and framework, and generates the artifacts it needs - a Dockerfile, a Helm chart, and a CI/CD workflow - opening a pull request with the changes.
Merge the pull request
Review and merge the PR. Merging activates the CI/CD pipeline in your repository.
Build and publish
CI builds and pushes the container image to GHCR and publishes the Helm chart as an OCI artifact. Ankra surfaces the image URL, chart OCI URL, and the
helm repo add command.Deploy
Deploy the application onto a cluster as part of a stack. Ankra tracks its readiness from there.
What Ankra tracks
For each application you see:- State and analysis status - where the application is in the connect/analyze/generate/build lifecycle, with an error message if something needs attention.
- Repository - owner, name, branch, and URL.
- Artifacts - the container image URL, the Helm chart OCI URL, and a ready-to-copy
helm repo addcommand. - Pull request - a link to the generated PR.
- Jobs - the underlying platform jobs for the application, so you can follow analysis and generation as it runs.
Security scanning
Applications include code and container security insights, so vulnerabilities surface alongside the build rather than in a separate tool. Pair this with AI Insights for proactive analysis.Managing applications
| Action | What it does |
|---|---|
| Retry | Re-run analysis and generation after fixing an issue (for example, adding the right credential or repository permissions) |
| Reconcile | Re-evaluate the application against its repository and refresh its state |
| Delete | Disconnect the application from Ankra |
Prerequisites
Connect GitHub
Add a GitHub credential with access to the application’s repository. The Ankra GitHub App needs permission to open pull requests and commit workflow files; the generated CI/CD pipeline then builds and pushes the image to GHCR using the repository’s own GitHub Actions token. See the GitHub integration for the exact scopes (including the optional permission that lets Ankra fix the Actions token so the first build can push to GHCR).
API
Applications are available over the API for CLI and scripted use, under/api/v1/org/applications (bearer-token authenticated).
| Method | Path | Purpose |
|---|---|---|
POST | /api/v1/org/applications | Connect a repository and create an application |
GET | /api/v1/org/applications | List applications (paginated, search supported) |
GET | /api/v1/org/applications/{application_id} | Get an application’s detail and artifacts |
GET | /api/v1/org/applications/{application_id}/jobs | List the platform jobs for the application |
POST | /api/v1/org/applications/{application_id}/retry | Retry analysis and generation |
POST | /api/v1/org/applications/{application_id}/reconcile | Reconcile the application |
DELETE | /api/v1/org/applications/{application_id} | Delete the application |