GitHub

Peer review is the control, and the pull request is already the evidence. Iru connects to GitHub and reads branch protection rules, PR lifecycle events, and status check results directly, so approval before merge is provable, not assumed.

Key Capabilities

• Verify production-bound changes receive explicit approval before merge
• Confirm branch protection prevents direct pushes to protected branches
• Check that required status checks pass before merge
• Track security findings from report through to fix

Evidence Collected

• Branch protection rules and required reviewers
• Pull request lifecycle events covering open, review, approve, dismiss, and merge
• Required status check configuration and results
• Code owner assignments
• Commit history

Learn more