GITHUB CONNECT

Turn your repository into a security report

Connect GitHub to scan selected public or private repositories for security issues. Choose which repos SetRepo can read, then review findings and scan your fixes.

Connect GitHub

Sign in or create a SetRepo account to continue. GitHub access is read-only, and you choose which repositories to share.

How it works

  1. 01

    Choose your repositories

    Connect the SetRepo GitHub App and select the repositories it can access. An organization owner may need to approve the installation.

  2. 02

    Set up your scan

    Pick a connected repository, name your project and optionally add its live URL. Review the scan setup and choose Quick or Deep before starting.

  3. 03

    Review and rescan

    Read the findings, make fixes in your own workflow and rescan the project. Manage repository access from your GitHub connection settings.

What your scan covers

Source-code checks
Quick scans check for exposed secrets, vulnerable dependencies and risky configuration. A paid Deep scan adds AI review of selected code for access-control and business-logic issues.
Add the deployed site
An optional live URL adds public-site checks alongside your code. Additional domain checks require ownership verification.
Public repositories work by link, too
You can paste a public repository URL in the project form without connecting the GitHub App. Private GitHub repositories use the connection; ZIP uploads are another way to provide code.

See coverage and limitations, how SetRepo handles your code and pricing.