Used by
OpenAna + GitHub
Repository analysis, security scanning and DevOps automation on your GitHub repos - commits, pull requests and more.
Live connectionSource control
Ana + GitHub
What Ana does with it.
Ana reads repositories, opens branches and pull requests, and follows your review rules.
- 01
Reads repositories to plan changes in context
- 02
Opens branches and pull requests that follow branch protection
- 03
Ties security findings and incidents to the code that caused them
Setup
Connected in four steps.
- 1
Connect
Open Integrations in Ana and connect GitHub with a scoped token, OAuth app or service account.
- 2
Scope it
Start read-only and choose which projects, repositories or accounts Ana can see.
- 3
Set the rules
Decide which actions need approval and who approves them - Ana’s guardrails enforce it.
- 4
Put it to work
Ana uses GitHub in investigations, fixes and reports, and every action is logged.
In practice
Playbooks that use GitHub.
Software
Upgrading a framework across dozens of services
A major framework or runtime version is going end-of-life and it touches every service. Ana plans the migration, upgrades each service in its own branch, fixes what breaks, and hands your team small, tested pull requests instead of one terrifying diff.
Read the playbook →Security
Turning a pentest report into merged fixes
A penetration test lands as a PDF with dozens of findings. Ana parses it, confirms which findings are reachable in your code and cloud, writes the fixes with regression tests, and hands the auditor evidence for every closure.
Read the playbook →Security
Clearing a dependency CVE backlog
Your SCA tool reports thousands of vulnerable dependencies and the number never goes down. Ana works out which are actually reachable, upgrades them safely with tests, and documents why the rest can wait.
Read the playbook →Governed
Every action, approved and logged.
Ana’s guardrails decide what it may do with GitHub, route sensitive actions to named approvers, and keep evidence for each decision. OpenAna is SOC 2 Type II, ISO 27001, HIPAA and GDPR compliant.
FAQ
OpenAna and GitHub.
No. Ana works with GitHub - it uses the tool as a source of context and a place to act - so you keep the tool you already run.
Source control
Also in this category.
See it connected
Ana on your GitHub.
Thirty minutes, your real setup, one real problem.