Back to Varydn
CI Enforcement

Policy at the Gate.
Not in Postmortem.

Varydn integrates natively into GitHub and your CI pipelines. When a pull request violates policy, the check fails and the merge is blocked automatically, consistently, without manual review cycles.

PR #247 feature/checkout-v2
acme-corp/payments-api
Required checks
Build / test (2m 14s) Passed
Varydn Security Check
1 critical finding merge blocked
Failed
Code review (approved) Passed
Merge is blocked. Varydn detected a critical finding: insecure deserialization in api/handlers.py:118. Remediation PR #248 has been auto-generated.
Capabilities

Everything You Need at the Merge Gate

Native GitHub Integration

Install the Varydn GitHub App in minutes. PR checks run automatically on every push. Status checks integrate directly into GitHub's merge controls.

Pipeline Integration

Works with GitHub Actions, GitLab CI, Jenkins, CircleCI, and Buildkite. A single step in your pipeline YAML is all that's required.

Configurable Policy Thresholds

Set severity thresholds per repository or org-wide. Block on critical only, or fail on any high-severity finding. Exceptions require documented justification.

PR Annotations

Findings appear as inline annotations on the pull request diff, pointing developers directly to the affected line with a plain-language explanation and fix suggestion.

Org-Wide Policy Management

Define policies once and apply them across all repositories in your organization. New repos are automatically enrolled. Exceptions are tracked and auditable.

Audit Trail

Every policy decision pass, fail, or exception is recorded with a timestamp, commit SHA, and actor. Compliance evidence is collected automatically.

Integration

One Step. Complete Coverage.

Adding Varydn to an existing GitHub Actions workflow takes under two minutes. Drop in the step, set your policy threshold, and every subsequent PR is covered.

# .github/workflows/ci.yml
name: CI
on: [push, pull_request]
jobs:
varydn-scan:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: varydn/scan-action@v2
with:
api-key: ${{ secrets.VARYDN_API_KEY }}
fail-on: critical,high
Supported Platforms

Works Where Your Team Works

GitHub
Native App + GitHub Actions step
Native
GitLab CI
Pipeline job via Docker image
Supported
Jenkins
Pipeline DSL step or shell command
Supported
CircleCI / Buildkite
CLI or Docker executor
Supported

Enforce Policy. Every PR. No Exceptions.

Request a demo to see how Varydn CI Enforcement integrates with your existing pipelines in under 15 minutes.