GitHub Control Signals Engine
Lightweight repository metadata collection. Detects CI/CD, branch protection, security policies, and code ownership signals. 100% free, no code analysis, webhook-driven.
What It Does
File Presence Detection
Detects SECURITY.md, CODEOWNERS, LICENSE, CHANGELOG.md, .github/workflows/*.yml. File existence only, no content parsing.
Branch Protection
Checks branch protection rules via GitHub API. Detects required reviews, status checks, signed commits.
CI/CD Detection
Detects presence of CI workflow files. Does not parse or execute workflows. Metadata only.
Badge Generation
Generates "HAIEC Control Signals" badge showing: Controls Present, Controls Partial, No Controls Detected.
What It Doesn't Do
Critical limitations - this is NOT a security scanner:
No Code Analysis
Does not analyze source code content. Use AI Security Static Engine for that.
No Repository Cloning
Never clones repositories. Metadata only via GitHub API.
No Security Scanning
Does not detect vulnerabilities. Use AI Security engines for vulnerability detection.
No Billing
Completely free. No subscription, no pricing tiers, no upsells.
Signals Detected
SECURITY.md
Security policy file presence
CODEOWNERS
Code ownership file presence
LICENSE
License file presence
CHANGELOG.md
Changelog file presence
Branch Protection
Protected branch rules enabled
CI Workflows
.github/workflows/*.yml presence
Dependabot
Dependabot configuration detected
Recent Activity
Commit activity in last 30 days
Required Reviews
PR review requirements
Quick Start (2 minutes)
Install GitHub App
Visit GitHub Marketplace and install "HAIEC Control Signals" app. Select repositories to monitor.
Install on GitHubAutomatic Detection
App automatically detects control signals on installation. Webhook triggers on PR events for real-time updates.
View Badge
Add badge to README.md to show control signals status. Updates automatically on repository changes.
