Integrations
| Integration | What it does | Data leaving Vellaci |
|---|---|---|
| GitHub App | Repositories, releases/tags, dependency-graph SBOM, Dependabot alerts, repository advisories, security metadata | None (read-only) |
| GitLab | Projects, releases, CycloneDX CI artefacts, security findings, project webhooks | None (read-only) |
| Jira Cloud | Create issues from vulnerabilities/incidents/tasks, sync status and assignee, close on completion | Title, summary facts, link |
| Linear | Same contract as Jira | Title, summary facts, link |
| Slack / Teams | Alerts for critical findings, incidents and CRA deadline thresholds | Identifiers and links; details only when enabled |
| PagerDuty | Trigger/resolve incidents for critical deadlines and incidents with deduplication | Identifiers and links; details only when enabled |
Secrets are encrypted at rest and never readable through the Data API. Every outbound URL is validated against private networks.
Last updated . This page describes the current release.