Resources
Documentation
Everything you need to set up, configure, and get the most out of MergeWhy. From quick-start guides to advanced deployment options.
Getting Started
Set up MergeWhy in under 2 minutes. Install the GitHub App, connect your repositories, and see evidence captured from your first PR merge.
Self-Hosted Deployment
Deploy MergeWhy on your own infrastructure with Docker Compose or Kubernetes Helm charts. OIDC authentication, S3-compatible storage, and pluggable LLM providers.
Configuration
Complete reference for all environment variables: database, authentication, storage, LLM providers, GitHub, Jira, Slack, and more.
OIDC Authentication
Configure single sign-on with Okta, Azure AD (Entra ID), Keycloak, Auth0, or any OIDC-compliant identity provider. Role mapping and single-tenant mode.
API Reference
REST API for CI/CD attestations, pipeline runs, build artifacts, and deployment tracking. API key authentication and rate limits.
CI CLI
Score pull requests and report evidence from any CI pipeline — GitHub Actions, GitLab CI, Jenkins, CircleCI, or Azure Pipelines. One command, zero config.
Client-Side Collector
Open-source Docker agent for defense and government environments. Evaluates evidence locally, signs attestations with Ed25519, and pushes only structured results.
Live Compliance Certificate
Share a public, real-time compliance URL with customers and auditors. Embeddable badges for your README and documentation.
Troubleshooting
Common issues with webhooks, database connections, OIDC authentication, and AI analysis. Error codes and debugging guides.