Integrations — GitHub & CI/CD for EU AI Act Compliance

Scanara connects to GitHub today. Other source-control and CI/CD integrations are planned.

On this page

Built-in Compliance Features

Built-in capabilities that need no separate integration. Plan limits apply; see Pricing.

GitHub Merge Gates
Block pull requests, or report on them, based on compliance scan results, with configurable enforcement modes and failure thresholds.
Monitoring Plans
Track post-market monitoring for deployed AI systems with review cadences and on-track, review-due and overdue status.
Risk Classification from Code Scans
Scans source code for ML frameworks to suggest a risk tier for each AI system. You confirm the classification.
Risk Classification via Assessments
Confirm and refine the classification through guided assessments (AIRA, FRIA, DPIA, GPAI provider, deployer and prohibited-practice screening) for evidence code scanning alone can’t capture.
Team Organization & Roles
Manage your organization with roles (Admin, Compliance Officer, AI Engineer, Auditor and Viewer) so access matches responsibility.
Compliance Roadmaps
Scan reports include a remediation roadmap that orders the actions to take.
Risk-Based Document Enforcement
Required compliance documents are checked by risk tier: high-risk systems are checked for Annex IV technical documentation and the Declaration of Conformity.

Download compliance artifacts, rule bundles, and audit data directly from Scanara.

Compliance Dossier Drafts
Export draft compliance dossiers as PDF, DOCX or Markdown. Templates cover Annex IV, Annex XI, the Declaration of Conformity and FRIA notification.
Scan Result Export
Download the scan report for your own records or as supporting evidence.
GDPR Data Export
Export a ZIP archive of your organization’s data (CSV and dossier PDFs) for portability, deletion requests or audits.

Connect your repositories and enforce compliance at the merge gate.

GitHub
Connect your GitHub repositories for automated scanning, merge gate enforcement, and pull request compliance checks.

Secure your organization with enterprise single sign-on.

Single Sign-On (SSO)
Connect your identity provider over OIDC (Okta, Microsoft Entra ID, Google Workspace, Auth0 or any OIDC-compliant provider). SAML support is planned. SSO is part of the Enterprise plan.

Integrations planned for upcoming phases — no date commitments.

Article 73 Serious Incident Report
Generate a pre-filled serious incident report PDF for providers of high-risk AI systems to send to the market surveillance authority of the Member State where the incident occurred.
GitHub Audit Log → S3
Forward GitHub audit logs to your S3 bucket daily. Compatible with any SIEM that reads from S3.
Slack
Receive compliance findings and scan alerts directly in your Slack channels via Block Kit notifications.
Jira
Automatically create Jira tickets from scan findings, with compliance context and remediation links attached.
PagerDuty
Escalate critical compliance findings to on-call rotations via PagerDuty events.
Outgoing Webhooks
Push scan events and compliance state changes to any HTTP endpoint with HMAC-signed payloads.
API Keys
Authenticate programmatic access to Scanara with user-scoped API keys.
GitLab
Connect GitLab repositories, enforce compliance at merge request gates, and run Scanara from GitLab CI pipelines.
Bitbucket
Connect Bitbucket repositories and trigger compliance scans from Bitbucket Pipelines.
Azure DevOps
Integrate with Azure Repos and enforce EU AI Act compliance checks in Azure Pipelines pull request builds.
Generic CI/CD Webhook
Trigger Scanara scans from any CI system by posting to a signed webhook endpoint — works with Jenkins, CircleCI, and others.
SCIM Provisioning
Automate user provisioning and deprovisioning from your identity provider using the SCIM 2.0 protocol.