AI security where your code already lives
Install the HAIEC GitHub App to protect pull requests automatically, then connect a repository to a HAIEC AI System when you need full evidence-bound Assurance.
Two capabilities, one App
Start with free pull-request protection. Upgrade to full Assurance when you need whole-repository, evidence-bound evaluation.
GitHub PR Protection
Install the App and HAIEC can check repository posture and review AI/AppSec-sensitive changes in pull requests. Optimized for fast developer feedback — a PR review is not a whole-repository Assurance Evaluation.
- Repository posture signals (SECURITY.md, CODEOWNERS, branch protection, CI config)
- Changed-file AI/AppSec analysis on pull requests
- Findings and comments posted back to the PR
- Automatic on supported pull-request events — no personal GitHub token
PR_CHANGED_FILES != FULL_REPOSITORY_ASSURANCE. Posture signals are useful supplemental evidence, not an Assurance disposition by themselves.
Evidence-Bound Remote Assurance
Connect the repository to a HAIEC AI System, verify the Source Asset, and run HAIEC's full remote static-analysis stack. The result is a canonical Assurance Evaluation with Report, Passport, and Dashboard history.
- Whole-repository remote analysis — explicitly initiated, not on every PR
- Canonical Evaluation: ALLOW / REVIEW / BLOCK within evaluated scope
- Report, Passport, and Dashboard — trigger from HAIEC, API, or your IDE
- Repository authorization via the GitHub App — never a caller-supplied token
From install to Assurance
Install the HAIEC GitHub App
From GitHub Marketplace — authorize only the repositories you choose.
PR protection starts automatically
Posture signals and PR changed-file analysis run on supported pull-request events. Findings appear as PR comments.
Connect the repository to an AI System
In the HAIEC dashboard, bind the repository to an AI System and verify the Source Asset (CONNECTED + VERIFIED).
Run full remote Assurance
Trigger from the dashboard, the Assurance API, or your IDE. The GitHub App supplies repository authorization — you never hand HAIEC a GitHub token.
Review the Evaluation
The same canonical Evaluation lands in the dashboard with Report, Passport, and evidence trail.
Scoped access, honest boundaries
You never provide HAIEC a personal GitHub token. You authorize the App only for the repositories you select.
Scoped repository access
The App sees only the repositories you authorize. Short-lived GitHub App installation credentials are generated server-side and never returned to API callers.
Posture signals are not Assurance
Governance metadata (branch protection, SECURITY.md, CI config) is supplemental evidence — never presented as a security verdict or certification.
PR review is diff-scoped
Pull-request analysis reads only the files changed in that PR. Whole-repository analysis happens only through an explicitly initiated Assurance run.
Findings, not source copies
HAIEC persists findings, evidence metadata, and evaluation records — not a copy of your repository.
Start with the pull requests you already have
Install the HAIEC GitHub App — PR protection is free and starts on your next pull request.