Description
Seal continuously monitors your GitHub repositories by periodically scanning dependency files to detect vulnerabilities. This automated oversight provides persistent visibility into your security posture, ensuring that new CVEs are identified across your codebases without requiring manual triggers or localized scanning.
For organizations that prioritize developer-led oversight, Seal generates automatic pull requests to apply sealed patches. This workflow allows teams to remediate vulnerabilities while keeping every change gated by a manual review process, ensuring that security fixes are approved by engineers before being merged into the codebase.
Integrate Seal directly into your CI pipeline with our native GitHub Action. It deploys the Seal CLI within your existing workflows, making automated vulnerability remediation a standard, seamless part of your GitHub Actions based deployment process.
The GitHub Action verifies authenticity at every step. Before it runs the Seal CLI, it checks the downloaded binary against Seal's signing key with cosign and fails the job if the signature does not match. The CLI then verifies the cryptographic signature of every sealed artifact it downloads before installing it, and stops the build if any artifact is unsigned or fails the check. Only software signed by Seal ever reaches your pipeline.
