Skip to content
ZicoderaAttesta

Integrations

What connects today, and what does not yet.

Only GitHub is in preview. Everything else is planned. Any tool that leaves commit trailers or PR labels already works for Declared provenance.

Showing 26 of 26

  • GitHub

    Preview

    Git hosts

    Read-only app. Commit and PR metadata, review events, check results.

  • GitLab

    Planned

    Git hosts

    Merge request metadata and approvals.

  • Bitbucket

    Planned

    Git hosts

    Pull request metadata and approvals.

  • Azure DevOps

    Planned

    Git hosts

    Pull request and policy metadata.

  • GitHub Actions

    Planned

    CI

    Attestation step with workload identity.

  • GitLab CI

    Planned

    CI

    Attestation job with ID tokens.

  • Jenkins

    Planned

    CI

    Attestation step for pipelines.

  • CircleCI

    Planned

    CI

    Attestation orb.

  • Buildkite

    Planned

    CI

    Attestation plugin.

  • GitHub Copilot

    Planned

    AI tools

    Declared provenance through trailers and labels today; deeper signals depend on what the tool exposes.

  • Claude Code

    Planned

    AI tools

    Agent hook for Attested session events.

  • Cursor

    Planned

    AI tools

    Declared provenance through trailers; deeper signals depend on the tool.

  • Windsurf

    Planned

    AI tools

    Declared provenance through trailers; deeper signals depend on the tool.

  • Attesta Gateway

    Planned

    AI tools

    Our own proxy for tools that cannot emit signed events.

  • Jira

    Planned

    Work tools

    Link changes to tickets.

  • Linear

    Planned

    Work tools

    Link changes to issues.

  • Slack

    Planned

    Work tools

    Policy alerts.

  • Okta

    Planned

    Identity

    SSO and SCIM.

  • Microsoft Entra ID

    Planned

    Identity

    SSO and SCIM.

  • Google Workspace

    Planned

    Identity

    SSO.

  • Snyk

    Planned

    Security/GRC

    Attach scan results to each change.

  • SonarQube

    Planned

    Security/GRC

    Attach quality gate results to each change.

  • GRC platform sync

    Planned

    Security/GRC

    Push evidence to your compliance platform.

  • Webhook delivery

    Planned

    Export

    Signed webhooks for policy results and new evidence.

  • SIEM export

    Planned

    Export

    Stream ledger events to your log pipeline.

  • Object storage delivery

    Planned

    Export

    Scheduled evidence-pack delivery to your bucket.

Missing something? Request an integration.

Product names are trademarks of their respective owners. Listing a name here describes a planned or preview integration and does not imply endorsement, partnership, or certification by the owner.

Know how your software was made.

Get startedTalk to us