Quickstart Guide¶
Get up and running with Mayo ASPM in 5 minutes.
1. Create an Account¶
Visit mayoaspm.com/signup and create your account. Each user gets one free organization.
2. Create an Organization¶
After signing in, create your organization. This is where all your assets, findings, and team members live.
3. Connect GitHub¶
Navigate to Integrations > Add Integration > GitHub to install the Mayo ASPM GitHub App on your organization. This imports your repositories and enables PR scanning.
4. Run Your First Scan¶
Go to Assets, find a repository, and click Scan. Select OpenGrep (SAST) and click Start Scan. The scan typically takes 30-60 seconds.
5. View Findings¶
After the scan completes, check the Dashboard for an overview or go to Findings to see detailed results. Click any finding to see severity, file path, code snippet, and remediation guidance.
6. Enable PR Scanning¶
Go to PR Scanning and toggle it on for your repositories. Configure which severities alert (post a comment) and which block (fail the check run).
Next Steps¶
- Set up OPA policies for automated triage
- Configure Jira for ticket generation
- Generate API keys for CI/CD integration