Docs Rampart

Rampart documentation

Connect repositories. Scan dependencies, code, secrets, IaC, and containers on every push.

Start with Rampart overview

Start here

Rampart overviewGitHub-native security: connect an organization, scan every push and pull request, ship fixes as pull requests.Read more Quickstart: your first scanOrganization, GitHub connection, import, scan, policy, and remediate in six steps.Read more

Scanning

How scanning worksThe five-stage pipeline every scan walks: sync, dependencies, SAST plus secrets, IaC plus containers, risk and policy.Read more Understanding findings and severityWhat a finding record contains, what each severity means, and how the triage lifecycle works.Read more GitHub integrationOAuth connect, repository sync, webhooks, PR checks, issue filing, and remediation pull requests.Read more