Skip to main content

Documentation Index

Fetch the complete documentation index at: https://help.dsalta.com/llms.txt

Use this file to discover all available pages before exploring further.

The Code Changes page provides a read-only evidence feed from your connected code repositories. It shows pull requests, code reviews, and merge activity — proving to auditors that your team follows proper code review practices. This module is integration-only. DSALTA pulls data directly from your code repositories using read-only API access. Manual entries are not supported because the value of this module is that evidence comes directly from the source system.

​
What DSALTA pulls

For each pull request or merge request, DSALTA captures:
ColumnDescription
PR NumberPull request or merge request number
TitleTitle of the code change
RepositoryWhich repository the change was made in
AuthorWho wrote the code
Reviewer(s)Who reviewed and approved the code
StatusOpen, Merged, or Closed
AdditionsLines of code added
DeletionsLines of code removed
CI ChecksWhether CI/CD checks passed before merge
Merge DateWhen the change was merged
SourceIntegration name (e.g., GitHub, GitLab)
Click any code change to view the full detail page with the complete review history and CI check results.

​
Why this matters for compliance

Auditors reviewing SOC 2 (CC8.1) and ISO 27001 (A.14.2.1) need evidence that:
  • Code changes are reviewed by at least one person who is not the author (author ≠ reviewer)
  • Changes pass automated checks (CI/CD) before being deployed
  • No changes are force-pushed or merged without review
  • Branch protection rules are enforced on production branches
DSALTA automatically validates these requirements by checking every merged pull request against your configured policies.

​
Integrations that feed Code Changes

Connect these integrations to automatically sync code change evidence into DSALTA:
IntegrationWhat syncs
GitHubPull requests, reviews, CI checks, branch protection
GitLabMerge requests, reviews, CI pipeline status
BitbucketPull requests, reviews, branch permissions
Azure DevOpsPull requests, reviews, build validation
To connect an integration, go to Integrations in the DSALTA sidebar.

​
How to read the Code Changes dashboard

The dashboard shows a summary of code change compliance across all connected repositories:
  • Total PRs — Number of pull requests in the selected time period
  • Reviewed — Percentage of PRs that received at least one review
  • Author ≠ Reviewer — Percentage of PRs where the reviewer was a different person than the author
  • CI Passed — Percentage of merged PRs where CI checks passed
If any metric falls below your configured threshold, DSALTA flags it in your compliance dashboard and generates a failing test.