GGateTest

GitHub App · free deterministic gate · private repos supported

GateTest on GitHub — install once, forget about config.

Free the moment you install: every push and PR runs the full deterministic engine — secrets, security, CI hardening, supply chain, code quality and more; only the AI-powered modules are skipped — with results posted as commit statuses and PR comments. Want AI code review on every push? Subscribe to Continuous. Want an auto-fix PR? Run a Scan + Fix or Forensic scan at gatetest.io.

Install GateTest on GitHub →
what happens on the next push
GateTest detected push to feature/billing-overhaul
Running free deterministic gate — full suite, AI-powered modules skipped...
[FAIL] secrets — 1 issue
ERR secrets › src/billing/invoice.ts:94
hardcoded API key detected
Commit status: 1 error · advisory mode. PR comment posted.
Block on it: set mode: strict in .gatetest.json.
github.com/apps/gatetest-hq

Select which repos GateTest can access. Public or private. You control the scope — single repo or entire org.

Install GateTest on GitHub →

No credit card for the GitHub App install.

1

Install the app

Pick individual repos or the whole org. Free, no card required.

2

Push or open a PR

GateTest hooks into GitHub webhooks — no config file needed. The free deterministic gate runs automatically on every push.

3

See results in your PR

Commit status and a PR comment with what the gate found. Fresh installs run in advisory mode — the check stays green until you set mode: strict in .gatetest.json.

permissions requested
ContentsRead & writeRead your code to scan it, and push the auto-fix branch — code is never stored
Pull requestsRead & writeOpen the auto-fix PR and leave inline review comments
Commit statusesRead & writeGreen ✅ or red ❌ on each commit
IssuesRead & writePost the scan summary as a PR comment
MetadataReadKnow which repos to watch
What is kept. GateTest reads your files, runs the modules in memory, posts results to GitHub, then discards the checkout. It keeps the findings (message, file path, line number) so your report exists. An auto-fix pull request also keeps short before and after snippets of the lines it changed. No training on your codebase.

Another git host, or your own CI? Capture a baseline and add one npx line:

Baseline and the CI line →