Evidence CodeMarine can inspect
- Committed or synchronized repository changes
- Dependency and configuration artifacts in the workspace
- CI results and downstream policy where connected
CodeMarine Dev · Devin
Independent security around Devin.
CodeMarine can inspect the resulting repository today. Preventive remote control requires governed tool and credential paths.
INTEGRATION PROFILE Planned
- Provider
- Devin
- Primary transport
- Repository, CI and future gateway controls
- Workspace scanning
- Available
- Blanket runtime protection
- Not claimed
What the integration can see and where it stops.
Workspace observation and pre-execution control are shown separately.
Defined blocking potential
- No customer-authoritative pre-tool path is claimed today
What you should not assume
- Remote execution is outside a local developer hook
- Preventive controls need an MCP gateway, scoped credentials or remote sidecar
- SCM and CI controls detect or stop downstream outcomes, not every remote action
Native controls protect Devin. CodeMarine protects the shared environment.
Keep provider permissions and sandboxes. Add one deterministic policy around the workspace and the rest of your stack.
Controls the surfaces and execution modes owned by the provider.
Secures resulting code, software supply chain and supported actions under one control model.
Connect CodeMarine to Devin.
Install the CodeMarine app, then use Agent setup to add the available local skills and repository protection for Devin.
The app supplies the scanner. The provider skill or adapter connects it to Devin.
- 01
InstallPlace the supported adapter and configuration.
- 02
VerifyCheck version, integrity and workspace binding.
- 03
ProveRun a harmless nonce-bound canary through the real host.
- 04
MaintainExpire proof when the host, policy or configuration changes.
Evaluate CodeMarine with Devin.
Map the current workspace, provider paths and limits before deciding which controls to rely on.
