Integrations
Exporters push Evidence Events in. Evaluators ask Evaluate at a deploy boundary. They are different jobs — even when they share a git repo.
v1 sources
| Guide | Role | Ships as |
|---|---|---|
| Kubernetes exporter | Deploy (+ config) facts | Helm chart (Evitrus/exporter → k8s/) |
| EventBridge → ECS | Deploy facts | EventBridge + Lambda |
| GitHub App | Build + Test facts | Evitrus-hosted webhook |
| GitHub Actions exporter | Build / Test / weaker Deploy facts | Evitrus/actions/export@v1 mode: emit |
| Ingest API / SDK | Custom emitters | POST /ingest |
Linear (Plan) and the Alert receiver (Operate incidents) are v1 sources; setup guides land with those exporters.
v1 evaluators
Independent from the exporter for the same source. Fail-open if Evaluate is unreachable. A deny records deploy.blocked.
| Guide | Role | Ships as |
|---|---|---|
| GitHub Actions evaluator | Pipeline gate | Same action, separate mode: check step |
| Kubernetes evaluator | Admission gate | Separate Deployment (Evitrus/exporter → admission/) |
Legacy / optional
Not in the v1 catalog. Kept for teams that already installed them. Prefer the runtime exporter when they disagree with a CI-emitted deploy.
| Guide | Notes |
|---|---|
| Terraform → ECS | Apply-time emit. EventBridge is the v1 ECS path. |
| Kubernetes audit | API-intent webhook. Does not replace the Deployment informer. |