CI/CD · Coming soonStop compliance regressions
Stop compliance regressions
at the pull request.
Coming soon: run RuleFix on every pull request, annotate findings where reviewers already look, and block merges that introduce high-severity issues. Today, scan imported repositories from the dashboard.
feat/signup-flow → main
Add signup endpoint #128
- RuleFix / consentConsent captured with version
- RuleFix / pii-loggingNo personal data in logs
- !RuleFix / encryption1 high: PII column not encrypted
- RuleFix / retentionRetention job present
RuleFix suggested a fix
Encrypt users.phone at rest — 1 file, 6 lines. Apply from the PR comment.
Capabilities
Built for code review.
Policy gates
Fail builds by severity, framework or rule — your call.
Review comments
Findings and suggested fixes posted inline on the diff.
Evidence artifacts
Every run stores evidence for your auditors.
Baseline mode
Only new issues block; existing debt is tracked separately.
SARIF output
Standard format for code-scanning dashboards.
Fast by default
Diff-aware scans keep pipeline time low.
Setup
Drop-in pipeline configs.
Add a RULEFIX_API_KEY secret, then add one of these.
.github/workflows/rulefix.yml
name: RuleFix
on: pull_request
jobs:
rulefix:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- run: npx -y @rulefix/cli scan --fail-on high --format sarif --output rulefix.sarif
env:
RULEFIX_API_KEY: ${{ secrets.RULEFIX_API_KEY }}
- uses: github/codeql-action/upload-sarif@v3
if: always()
with:
sarif_file: rulefix.sarif
Ship AI-powered products
that are compliant by design.
Join developers building with RuleFix.