Wiz
The Wiz integration is not available yet. Early access is planned for September 2026. If you are interested, reach out to your Customer Success Manager or support@gitguardian.com.
GitGuardian integrates with Wiz to push the secret incidents detected in your version control sources to Wiz as native secret findings. Security teams get a single view of secrets risk and cloud risk, and can prioritize and remediate leaked credentials directly from Wiz.
How it works
Once a day, GitGuardian sends your active secret incidents to Wiz:
- Scope: incidents detected in your version control sources (GitHub, GitLab, Bitbucket, Azure DevOps) with an open status (triggered or assigned).
- Granularity: one finding per incident and per repository. An incident groups all the occurrences of the same secret: when an incident has several occurrences in the same repository, only the most recently detected one is sent to Wiz, and the full list remains available in GitGuardian. Each finding carries the detection context: repository, file path, commit, detector, severity, and a link back to the GitGuardian incident.
- Privacy: GitGuardian never sends secret values to Wiz. Findings contain a SHA-256 hash of the secret and its metadata only.
Each sync sends the full list of active incidents. Wiz keeps findings open as long as they are present in the latest upload: when you resolve or ignore an incident in GitGuardian, it is dropped from the next sync and Wiz removes the finding automatically.
Severity mapping
The severity of the GitGuardian incident sets the severity of the finding in Wiz:
| GitGuardian severity | Wiz severity |
|---|---|
| Critical | Critical |
| High | High |
| Medium | Medium |
| Low | Low |
| Info | Low |
| Unknown | None |
Configure the integration
You need a Wiz service account with the required permissions to upload findings. See the Wiz documentation on prerequisites to create one.
- In Wiz, retrieve your service account Client ID and Client secret, along with your tenant Authentication URL and API endpoint URL.
- In GitGuardian, go to Settings > Integrations > Wiz and click Configure.
- Paste the four values from Wiz into the form.
- Click Add integration.
You can pause or resume the sync at any time from the integration settings page.
The Automatic incident resolution option is not active yet. Once available, enabling it will let GitGuardian periodically resolve incidents that have been ignored in Wiz.
Until then, GitGuardian is the source of truth: a finding ignored or resolved in Wiz is recreated at the next sync as long as the corresponding incident is still open in GitGuardian.
Limitations
- Only incidents from version control sources are sent. Secrets detected in other sources (Slack, Jira, Confluence, and others) are not pushed to Wiz. Gerrit sources are not supported.
- Incidents detected by custom detectors are not sent.
- Occurrences without a file path are skipped.
- Wiz ingests uploads in batches: new findings can take up to 24 hours to appear in Wiz.
- After an incident is resolved or ignored in GitGuardian, its finding can remain visible in Wiz for up to 7 days before Wiz removes it.
