Whole-Repository Scans
A repository scan assesses a selected repository and branch as a one-time run. It is separate from the scans attached to an individual PR review and from SBOM inventory exports.
Start a Scan
One-Time Runs must be available to your account under the deployment rollout. Its absence is not necessarily a subscription-plan problem.
- Open One-Time Runs and choose the repository-scan offering. Its page is
/repo-scan. - Review the displayed offering, scope, price and account arrangement. The page selects the scan profile internally; there is no profile selector.
- Choose or enter an accessible Repository and Branch. The branch field can use the repository's default when offered.
- Use the action displayed for your account: Start scan, a priced payment-and-scan action, or an eligible Wallet checkout.
- Check the created run and follow its status. Payment/authorization and actual scan completion are separate states.
Prices and complimentary arrangements are configured for the account. A one-time repository scan does not require a recurring plan merely to access its offering. Provider/account repository authorization still applies. Spending shared Wallet funds requires account-admin access.
Results and Exports
Open the run from the scan list to inspect status, report and findings. Completed report routes support PDF and Markdown exports. Check the run's reported availability before downloading; a queued or failed run may not yet have a final report.
Verification and Troubleshooting
Confirm the run refers to the intended provider account, repository and branch. If access fails, check the repository's connection and account scope. If payment was accepted but starting failed, use the reported retry/status flow rather than purchasing duplicate work.
A clean report does not establish that every defect or vulnerability was detected. Review findings and evidence in the context of the scanned revision.
