Resources

Documentation

Everything you need to set up, configure, and get the most out of MergeWhy. From quick-start guides to advanced deployment options.

Getting Started

Set up MergeWhy in under 2 minutes. Install the GitHub App, connect your repositories, and see evidence captured from your first PR merge.

Self-Hosted Deployment

Deploy MergeWhy on your own infrastructure with Docker Compose or Kubernetes Helm charts. OIDC authentication, S3-compatible storage, and pluggable LLM providers.

Configuration

Complete reference for all environment variables: database, authentication, storage, LLM providers, GitHub, Jira, Slack, and more.

OIDC Authentication

Configure single sign-on with Okta, Azure AD (Entra ID), Keycloak, Auth0, or any OIDC-compliant identity provider. Role mapping and single-tenant mode.

API Reference

REST API for CI/CD attestations, pipeline runs, build artifacts, and deployment tracking. API key authentication and rate limits.

Client-Side Collector

Open-source Docker agent for defense and government environments. Evaluates evidence locally, signs attestations with Ed25519, and pushes only structured results.

Troubleshooting

Common issues with webhooks, database connections, OIDC authentication, and AI analysis. Error codes and debugging guides.