Docs

Docs for Eunomio CI Guard

Everything you need to understand the product, run a first sandbox install, and onboard your first repositories.

8 MIN
Quickstart
Install the app and onboard a first sandbox repo end to end.
READ
How it works
The scan → bootstrap → migrate → guard loop, explained.
REF
Supported scope
GitHub Actions, AWS, Terraform. What we check, what we don't.
REF
Findings & checks
The risky auth patterns we catch and how they surface in PRs.
REF
Installation requirements
GitHub App permissions and org‑level install.
HELP
Troubleshooting
Common install, scan, and OIDC‑migration issues and fixes.
Quickstart

Start with a sandbox repo first.

Eunomio CI Guard is built for teams using GitHub Actions, AWS, and Terraform. Start with a sandbox, then move to production‑shaped repos once your install flow is working end to end.

1Create or select a GitHub App installation target.
2Install Eunomio CI Guard.
3Connect the app to the repositories you want to scan.
4Let the baseline scan run.
5Review and merge the bootstrap pull request.
6Review any OIDC migration PR or guidance issue.
7Open a qualifying PR and confirm the check runs.
8Require the check in branch protection (optional).
Install GitHub App Installation requirements
Example, branch protection
# require the CI Guard check to merge
branch_protection:
  required_status_checks:
    - eunomio / ci-guard