Guardrail Ledger documentation
Getting started
Guardrail Ledger keeps the record behind each pull request gate. Scanners run on your own agents. The workspace stores their SARIF results, your gate settings and your exceptions.
Start a trial or buy a plan
- Open the Guardrail Ledger buy page on spot-suite.com and choose a plan.
- Enter your work email and company, then add a card at Stripe checkout. The 30-day trial starts and the card is not charged unless you continue.
- Choose the region for a paid order. Trials run in the EU.
- Wait for setup, which takes about 5 to 10 minutes. The welcome email with your sign-in link arrives right after checkout.
Sign in
Your workspace address has the form https://<workspace>.guardrail-ledger.com/app/. Choose Sign in with Spot Suite and use the Spot Suite account whose password you set from the welcome email. Business workspaces can use Microsoft Entra single sign-on through Spot Suite.
The console
| Page | What it is for |
|---|---|
| Findings | Scanner results per repository, filtered by status: open, resolved or excepted. |
| Exceptions | Accepted findings with owner, approver, reason and expiry. |
| Gates | The severity that fails a pull request, the engines that count and the contributor cap. |
| Pipeline | Ingest tokens, the Azure DevOps task, the GitHub Action and a first-scan example. |
First steps
- Open the Pipeline page and send the first-scan example. A sample finding appears under Findings.
- Mint an ingest token and connect Azure DevOps or GitHub Actions. The next page walks through it.
- Open the Gates page and choose what fails a pull request.