GitHub Actions
Bring workflow runs and release artifacts into the review of the change they belong to.
Connect the workflow to the revision
Proofline reads configured workflow and deployment scopes, including the status GitHub reports and the exact commit named by a deployment. This gives a review a concrete workflow record to inspect.
Checked-in workflow definitions also supply context about external actions and their references. A mutable action reference remains identified as mutable even when its current commit can be recorded.
Use the artifacts your pipeline produces
An authenticated workflow artifact can supply Terraform plan or state JSON. Proofline checks the repository, run, commit, and artifact metadata against the configured source before accepting it.
A successful workflow is useful evidence about the pipeline. Establishing which image is running still requires evidence from the workload or deployment platform.
Start with your repository
Install the Proofline GitHub App for the repositories you want reviewed. Link the repository to an environment to include infrastructure evidence in its assessment.
Get started with GitHub