# MergeGuide

## Docs

- [OSCAL export](https://docs.mergeguide.com/compliance/oscal-export.md): Export tamper-evident compliance evidence as NIST OSCAL for your auditors.
- [Compliance overview](https://docs.mergeguide.com/compliance/overview.md): How MergeGuide maps your code checks to compliance frameworks and produces audit evidence.
- [SBOM export](https://docs.mergeguide.com/compliance/sbom-export.md): Generate a CycloneDX or SPDX Software Bill of Materials from your dependency manifests.
- [Configuration file](https://docs.mergeguide.com/configuration/mergeguide-yaml.md): Configure MergeGuide for a project with a .mergeguide/config.yaml file.
- [Policies & frameworks](https://docs.mergeguide.com/configuration/policies-and-frameworks.md): Choose which policies run and scope your checks to the compliance frameworks you care about.
- [Severity & fail thresholds](https://docs.mergeguide.com/configuration/thresholds.md): Control which findings block a commit, a check, or a merge.
- [Core concepts](https://docs.mergeguide.com/get-started/core-concepts.md): The MergeGuide vocabulary — policies, frameworks, findings, severity, and enforcement layers.
- [Plans & entitlements](https://docs.mergeguide.com/get-started/plans-and-entitlements.md): MergeGuide's three plans and what each one includes.
- [Quickstart](https://docs.mergeguide.com/get-started/quickstart.md): Install the MergeGuide CLI, authenticate, and run your first policy check.
- [What is AI code governance?](https://docs.mergeguide.com/get-started/what-is-ai-code-governance.md): AI velocity, enterprise governance: govern AI-written and human-written code in one place, without leaving your workflow.
- [MergeGuide documentation](https://docs.mergeguide.com/index.md): Embrace AI velocity without sacrificing control. Learn to install, configure, and operate MergeGuide across your development workflow.
- [Install the CLI](https://docs.mergeguide.com/install/cli.md): Install the MergeGuide command-line interface from PyPI and verify it.
- [Install git hooks](https://docs.mergeguide.com/install/git-hooks.md): Check staged changes against your policies locally, before they leave your machine.
- [Install the IDE extension](https://docs.mergeguide.com/install/ide-extension.md): Install the MergeGuide extension for VS Code (and compatible editors) to see findings as you edit.
- [Install the MCP server](https://docs.mergeguide.com/install/mcp-server.md): Bring MergeGuide governance into your AI coding assistant with the MCP server.
- [Set up the PR gate](https://docs.mergeguide.com/install/pr-gate.md): Evaluate every pull request against your policies and report results inline, across all four SCM platforms.
- [Azure DevOps](https://docs.mergeguide.com/integrations/azure-devops.md): Connect Azure DevOps so MergeGuide evaluates pull requests and reports results.
- [Bitbucket](https://docs.mergeguide.com/integrations/bitbucket.md): Connect Bitbucket so MergeGuide evaluates pull requests and reports results.
- [CI/CD patterns](https://docs.mergeguide.com/integrations/ci-cd-patterns.md): Wire MergeGuide into any CI system using the CLI and SARIF output.
- [GitHub](https://docs.mergeguide.com/integrations/github.md): Run MergeGuide on pull requests with the GitHub Action and upload results to code scanning.
- [GitLab](https://docs.mergeguide.com/integrations/gitlab.md): Run MergeGuide in GitLab CI and surface results as SAST reports on merge requests.
- [Benchmarks methodology](https://docs.mergeguide.com/methodology/benchmarks.md): How MergeGuide compares your metrics against an industry baseline.
- [PolicyMerge savings](https://docs.mergeguide.com/methodology/policymerge.md): How MergeGuide estimates the effort you save by assessing overlapping controls once.
- [ROI methodology](https://docs.mergeguide.com/methodology/roi.md): How MergeGuide estimates the engineer-hours you save by catching findings before merge.
- [Savings calculator](https://docs.mergeguide.com/methodology/savings-calculator.md): How the compliance savings calculator estimates the effort you save by merging overlapping frameworks.
- [Compliance views](https://docs.mergeguide.com/navigation/compliance-views.md): See framework coverage and produce audit evidence from the dashboard.
- [Dashboard](https://docs.mergeguide.com/navigation/dashboard.md): A tour of the MergeGuide dashboard and what each area is for.
- [PolicyMerge](https://docs.mergeguide.com/navigation/policymerge.md): Combine overlapping compliance frameworks and assess once to satisfy several.
- [Enforcement layers](https://docs.mergeguide.com/operation/enforcement-layers.md): How MergeGuide applies the same governance at each point in your workflow, so issues are caught early.
- [Reading findings](https://docs.mergeguide.com/operation/reading-findings.md): Understand the parts of a finding and how to act on it.
- [Running scans](https://docs.mergeguide.com/operation/running-scans.md): Check code against policies and run the vulnerability and IaC scanners.
- [CLI reference](https://docs.mergeguide.com/reference/cli.md): Complete reference for the MergeGuide command-line interface — every command, group, and flag.
- [Configuration keys](https://docs.mergeguide.com/reference/config-keys.md): Reference for the keys in your MergeGuide configuration file.
- [Glossary](https://docs.mergeguide.com/reference/glossary.md): Definitions of the terms used throughout the MergeGuide documentation.
- [Output formats & supported languages](https://docs.mergeguide.com/reference/output-formats.md): The output formats MergeGuide produces and the languages and file types it checks.
- [Release notes](https://docs.mergeguide.com/release-notes.md): What's new in MergeGuide.
- [Common issues](https://docs.mergeguide.com/troubleshooting/common-issues.md): Diagnose and fix the most common MergeGuide setup and run problems.
- [FAQ](https://docs.mergeguide.com/troubleshooting/faq.md): Short answers to frequently asked questions about MergeGuide.

## OpenAPI Specs

- [openapi](https://docs.mergeguide.com/api-reference/openapi.json)