Integrations
Gorilli Compliance works with GitHub, your public websites and email. These are the integration points available today.
GitHub
Connect a repository with a GitHub token, stored encrypted. Scans check repository hygiene such as branch protection, SECURITY.md, CODEOWNERS and dependency update settings.
GitHub
Add the signed webhook to a repository and every push triggers a scan, so a change that breaks a control shows up as a new finding right away.
GitHub
For supported findings, open a pull request with the fix or guidance, such as a SECURITY.md, a CODEOWNERS file or branch protection steps. You review and merge it as usual.
HTTPS
Add a website URL and it is fetched over HTTPS to check security headers, TLS, cookies set before consent, and required legal pages and notices.
Workspace owners and admins get an email when a check that was passing starts failing, with a link to the finding.