Used by
OpenAna + GitHub Actions
Workflow automation and CI/CD pipelines connected to your GitHub repositories.
Live connectionCI/CD & GitOps
Ana + GitHub Actions
What Ana does with it.
Ana reads pipeline runs, diagnoses failures and ships fixes through the pipelines you already trust.
- 01
Diagnoses failing workflows and proposes the fix
- 02
Adds policy and security checks to workflows
- 03
Ships Ana’s changes through your existing workflows
Setup
Connected in four steps.
- 1
Connect
Open Integrations in Ana and connect GitHub Actions with a scoped token, OAuth app or service account.
- 2
Scope it
Start read-only and choose which projects, repositories or accounts Ana can see.
- 3
Set the rules
Decide which actions need approval and who approves them - Ana’s guardrails enforce it.
- 4
Put it to work
Ana uses GitHub Actions in investigations, fixes and reports, and every action is logged.
In practice
Playbooks that use GitHub Actions.
Security
Fixing cloud misconfigurations at the source
Your CSPM tool flags public buckets, wide IAM policies and open security groups. Ana traces each one back to the infrastructure-as-code that created it, fixes it there, and stops it from coming back.
Read the playbook →Software
Upgrading a framework across dozens of services
A major framework or runtime version is going end-of-life and it touches every service. Ana plans the migration, upgrades each service in its own branch, fixes what breaks, and hands your team small, tested pull requests instead of one terrifying diff.
Read the playbook →Governed
Every action, approved and logged.
Ana’s guardrails decide what it may do with GitHub Actions, route sensitive actions to named approvers, and keep evidence for each decision. OpenAna is SOC 2 Type II, ISO 27001, HIPAA and GDPR compliant.
FAQ
OpenAna and GitHub Actions.
No. Ana works with GitHub Actions - it uses the tool as a source of context and a place to act - so you keep the tool you already run.
CI/CD & GitOps
Also in this category.
See it connected
Ana on your GitHub Actions.
Thirty minutes, your real setup, one real problem.