Counterbranch alpha — Catch access-control changes before you merge

[jhawlwut]

Catch access-control changes before you merge

A small code change can change who gets access. Make it part of your PR review.

Counterbranch highlights changes to guards, permissions, routes, and recognized policy files—so you know what changed and where to look.

• Understand the change. Get plain-English PR findings with before-and-after source links.
• Investigate the evidence. Download a report snapshot with exact commits, file checksums, and a guide for exploring the findings with your coding agent.
• See the limits. Incomplete and unavailable comparisons are explicitly flagged.

Supported alpha-version patterns

Frameworks: Express, Hono, NestJS, Spring MVC, Django, Django REST framework, FastAPI, and Flask.

Policy discovery: OPA/Rego, Cedar, and OpenFGA policy files and recognized call sites.

Get started

Runs on your Ubuntu 24.04 x86-64 GitHub Actions runner. No signup or model required. Enable PR comments in the workflow.

Add Counterbranch to your workflow →

Share feedback or report an issue

Alpha: coverage varies by pattern. Findings guide review; the scanner does not execute policies or prove runtime access is correct.

---

This discussion was created from the release Counterbranch alpha — Catch access-control changes before you merge.