Product guide · English
Run your first audit
Start an audit from the repository, choose its scope, and read the completed report together with its execution steps and target commit.
Steps
- Open a connected repository and choose Run audit. Confirm the target before submitting; the usual starting selection is the latest default-branch commit.
- Choose an available template or custom checks. Essential risks uses the Quick Scan check set: posture, gitleaks and OSV. Other templates select broader sets; they do not automatically include every analyzer.
- Follow the scan steps until the audit finishes. Inspect failed or skipped checks instead of interpreting a lack of findings as a pass.
- Read Fix these first, then the findings, scores and coverage. Keep the audit commit with any remediation or release decision.
Read the result
A report describes one target and selected analysis scope. A partial report means one or more analyzers did not complete, so affected areas may be under-reported. A completed scan is not a certification of security.
Limits and availability
Available checks depend on account access, supported languages, tool availability and scan limits. Repository source is inspected without running its application or test suite. Do not rely on a predicted runtime; completion depends on the repository and selected checks.
This guide describes the implemented workflow. The features available in your workspace depend on account capabilities and configuration; advanced workflows are not all included in Free Quick Scan. Check the available controls and the evidence returned by each run.