GitHub
Workflow runs, issues, pull requests, and security alert metadata, subject to API permissions and repository configuration.
Repository providers
GitLab
Pipelines, issues, and merge requests. Security findings depend on instance capabilities, licensing, and token permissions.
Forgejo
Workflow and work-item data depend on instance capabilities. Dependency, code, and secret alert types are currently unsupported.
Gitea
Workflow and work-item data depend on instance capabilities. Dependency, code, and secret alert types are currently unsupported.
Notification destinations
Route workflow events to email, Gotify, ntfy, Discord, browser push or custom Apprise destinations.
Notifications that reach youRead-only MCP
Clients must support custom HTTP authorization headers. MCP OAuth discovery, provider actions, configuration changes, and synchronization triggers are not available.
MCP access