Integrations
Every integration says exactly how firmly it holds the line. Observe watches and flags. Gate makes your tool wait for an approval. Hold means only Aspian has the production credentials.
Source control
- GitHubThe Aspian GitHub App scans your repos, applies the baseline, and acts as a deployment protection rule so production waits for an approval.
- GitLabMerge requests, approvals and deployments from GitLab, scored against the same baseline and gated on your protected production environment.
- BitbucketPull requests, merge checks and Pipelines deployments from Bitbucket Cloud, under the same rulebook as every other repo.
Deploy targets
- VercelKeep deploying on Vercel. Aspian watches every deployment, holds production behind Deployment Checks, and can hold the only production token.
- NetlifySigned deploy notifications tell Aspian what went live. Lock auto-publishing and Aspian publishes only approved deploys.
- Cloudflare Pages and WorkersAudit Logs and Pages notifications show what changed. For a real gate, Aspian deploys approved output with a scoped token only it holds.
- AWS (Lambda, ECS, EKS)CloudTrail and EventBridge show every change. Lambda code signing and ECS lifecycle hooks refuse anything Aspian didn’t approve.
- KubernetesA snapshot reporter shows what is running in every namespace. Admission control admits only images whose digest has an approved change.
AI coding agents
- Claude CodeYour policy pack writes Claude Code managed settings and hooks, so every session follows your rules, and its changes still pass the same gates as a person’s.
- GitHub CopilotThe same pack writes Copilot’s repository hooks and instructions. Pull requests from the Copilot coding agent are governed changes like any other.
- CursorThe rulebook writes Cursor rules, the gateway holds the MCP allowlist, and every change Cursor produces still meets the same approval rules.
Approval channels
- SlackApproval requests arrive in Slack with the full card. The approval itself is a passkey on Aspian’s page, never a bare button.
- Microsoft TeamsThe same approval card and passkey step-up, in Teams.
- WhatsAppA WhatsApp message starts the approval with a reference code and a single-use link. The details and the passkey open after sign-in.
Change tickets
See what shipped without approval in your last 90 days.
Install the GitHub App and the scan arrives in minutes: every repo scored, every unreviewed merge and unapproved deploy named. Nothing is blocked until you choose.
Ship like a startup. Prove it like a bank.