Documentation

Review evidence providers

The full catalogue of providers that can attach verification evidence to a pull request.

Thirty-one providers can attach evidence to the pull requests Coroid opens. For what evidence is and why it belongs on the pull request, see Review evidence.

Configure providers under the project's integration settings.

Git-native

ProviderProduces
GitHub Actions environmentsWeb preview
GitLab Review AppsWeb preview

These need the least setup, because the environment already exists on the git surface Coroid is reading.

Static hosting

ProviderProduces
VercelWeb preview
NetlifyWeb preview
Cloudflare PagesWeb preview
AWS AmplifyWeb preview

Full-stack previews

ProviderProduces
RenderWeb preview
RailwayWeb preview
Heroku Review AppsWeb preview
Fly.ioWeb preview
NorthflankWeb preview
QoveryWeb preview
PorterWeb preview

Mobile distribution

ProviderProduces
Expo EASMobile build
TestFlightMobile build
Google Play internal testingMobile build

Review and scanning

ProviderProduces
CodeRabbitAI review
Qodo / PR-AgentAI review
GreptileAI review
Cursor BugbotAI review
SonarQube CloudSecurity scan
SnykSecurity scan
SemgrepSecurity scan

Coverage and visual

ProviderProduces
CodecovCoverage
ChromaticVisual review
PercyVisual review

End-to-end and monitoring

ProviderProduces
Cypress CloudEnd-to-end, performance
ChecklyEnd-to-end, performance
MaestroEnd-to-end, performance
BrowserStackEnd-to-end, performance

Custom

A custom evidence webhook covers anything not listed. If a tool can post a result, it can contribute evidence.

How evidence is ingested

Providers differ in how Coroid picks up their output:

  • Git surface — read from the commit or pull request status your provider already writes. Least configuration.
  • CI output — read from your pipeline's output.
  • Direct API — Coroid calls the provider directly, which gives richer detail and needs credentials.
  • Direct deploy — Coroid can trigger the preview itself.

Start with the git surface where a provider supports it. It usually works with no extra credentials because the integration you already have is writing the status.

Choosing

Connect what you already run. Review evidence is about surfacing existing verification next to the code, not adopting new tools — and each additional artifact competes for reviewer attention. See Review evidence.