Block Secrets Before They Reach Your Default Branch
Native GitHub and GitLab enforcement runs inline on every pull request and merge request, scanning with 467 detection patterns plus BPE tokenization and blocking before merge when a secret is found. Developers get instant feedback without leaving their workflow.
Inline
Runs on every PR, blocks before merge
467
Detection patterns
0
Secrets reach default branch (enforcement guarantee in block mode)
GitHub PR Gate
Native GitHub App integration. Install once, enforce across all repositories.
- Required status check on pull requests
- Inline PR comments with finding details
- Configurable enforcement modes: block, warn, or monitor
- Branch protection rule integration
- Free: 1 repo | Essentials: 10 repos | Business: 50 repos | Enterprise: Unlimited
GitLab MR Gate
Native GitLab integration for merge request enforcement.
- Pipeline job integration for merge requests
- Inline MR comments with finding context
- Configurable enforcement: block, warn, or monitor
- Protected branch enforcement
- Available on Business, Enterprise, and Enterprise+ tiers
Enforcement Modes
Block
Prevent merge when secrets are detected. The PR check fails and developers must remove the secret before merging.
Warn
Allow merge but flag the finding. PR check passes with a warning comment. Findings appear in the dashboard for review.
Monitor
Silent monitoring with no PR feedback. Findings are recorded in the dashboard only. Useful during rollout and evaluation.
Developer Experience
The gate blocks only on confirmed-active secrets — 20 live verifiers test each finding against the provider API, so developers are not stopped for revoked tokens or test fixtures.
Enable PR enforcement in 15 minutes
Install the GitHub App or GitLab integration and start blocking secrets immediately.