Compliance Issues Slip Into Production
Most teams discover bias, privacy violations, and security risks after deployment—when fixes are 10x more expensive.
HAIEC is different. We scan every PR automatically with deterministic rules. Catch issues before merge.
Manual Code Review
- • Human reviewers miss issues
- • Inconsistent standards
- • Slow feedback loops
- • No compliance expertise
HAIEC's Approach
- • Automated PR checks
- • 200+ deterministic rules
- • Instant feedback
- • Built-in compliance knowledge
Why It Matters
- • Catch issues pre-merge
- • 10x cheaper to fix early
- • Prevent production incidents
- • Maintain compliance
GitHub-Native Compliance
Everything you need for automated compliance scanning
Automated PR Checks
Every pull request is automatically scanned. Results appear as GitHub checks with pass/fail status and detailed findings.
SARIF Reports
Industry-standard SARIF output integrates with GitHub Security tab. View findings alongside Dependabot and CodeQL.
GitHub Actions
Pre-built GitHub Actions for custom workflows. Run scans on schedule, deployment, or custom triggers.
Branch Protection
Require passing compliance checks before merge. Block PRs with critical violations automatically.
Inline Comments
Findings appear as inline PR comments on exact lines of code. Developers see issues in context.
Private Repo Support
Full support for private repositories. Code never leaves your infrastructure. On-premise option available.
How It Works
Three simple steps to automated compliance scanning
Install GitHub App
One-click installation from GitHub Marketplace. Grant repository access and configure scanning preferences.
Configure Rules
Select compliance frameworks (SOC 2, GDPR, HIPAA, ISO 27001). Choose severity thresholds and notification settings.
Automatic Scanning
Every PR is scanned automatically. Results appear as GitHub checks with detailed findings and remediation guidance.
GitHub Actions Example
Coming SoonCI/CD integration coming soon. Currently, use the GitHub App for automatic PR scanning.
name: HAIEC Compliance Scan
on:
pull_request:
branches: [main, develop]
push:
branches: [main]
jobs:
compliance-scan:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v3
- name: Run HAIEC Compliance Scan
uses: haiec/compliance-action@v1
with:
api-key: ${{ secrets.HAIEC_API_KEY }}
frameworks: 'soc2,gdpr,hipaa'
fail-on: 'critical,high'
- name: Upload SARIF
uses: github/codeql-action/upload-sarif@v2
with:
sarif_file: haiec-results.sarif