Integrations · Source control
Merge requests, approvals and deployments from GitLab, scored against the same baseline and gated on your protected production environment.
Control levels
1Observe
We watch, record and flag.
Group webhooks and audit events: merges, approvals and deployments.
2GateRecommended
The tool waits for an approval.
A deployment approval rule on the protected production environment, released by Aspian.
3Hold
Only Aspian holds the credentials.
Production deploy credentials held by Aspian and used only for approved, prebuilt output.
Set it up
- 1Connect your GitLab group with a scoped token.
- 2Review the scan of the last 90 days.
- 3Protect the production environment with the Aspian approval rule.
See what shipped without approval in your last 90 days.
Install the GitHub App and the scan arrives in minutes: every repo scored, every unreviewed merge and unapproved deploy named. Nothing is blocked until you choose.
Ship like a startup. Prove it like a bank.