Skip to main content
Garth integrates with your Git platform to automatically review pull requests and scan your codebase for security vulnerabilities and quality issues. Everything is configured from the Garth web app — no CLI tooling or manual webhook setup required.

Supported Git platforms

Connect Garth to any of the four major Git platforms:

Pull request review

Garth reviews every pull request with full awareness of the change context — not just the diff in isolation.

Inline comments

Line-level review comments appear directly on the diff, each with a concrete suggested code change.

PR summary

Every review includes an Overall Assessment, a list of Key Changes, and actionable Recommendations.
Learn more about pull request review →

Code scan

Garth continuously scans your repositories for security and quality issues across six categories:

Secret scan

Detect hardcoded credentials, API keys, and tokens before they reach production.

SCA

Identify vulnerable third-party dependencies and outdated packages.

SAST

Find security flaws in your source code using static analysis.

IaC

Audit infrastructure-as-code files for misconfigurations and compliance issues.

Code complexity

Surface overly complex functions and modules that increase maintenance risk.

Code duplicates

Identify repeated code blocks that should be consolidated.
Scans can be scheduled to run automatically on a defined cadence or triggered manually from the Garth dashboard at any time. Learn more about code scan →

How it works

1

Connect your Git platform

From the Garth web app, go to Settings → Integrations and link your GitHub, GitLab, Azure DevOps, or Bitbucket account using a personal access token or OAuth.
2

Install repositories

Select the repositories you want Garth to monitor. Garth automatically installs and manages webhooks — no manual configuration needed.
3

Receive pull request reviews

When a pull request is opened, Garth analyses the changes in context and posts an inline review with line-level comments, code suggestions, and a summary.
4

Run code scans

Schedule recurring scans or trigger them on demand. Results surface in the Garth dashboard, organized by severity and category.