Scan a private repo
Connect GitHub, pick the repos you want checked, and scan them. Same price as public repos: the scan is free, and the $39 fix pack works the same.
What ShipCheck can see: only the repos you pick in GitHub, read-only. We ask for two permissions: Contents: read (to clone the code for the scan) and Metadata: read (repo name, size and visibility). We can't write, push, open issues or see anything else.
What we keep: no code. Each scan clones into a throwaway container on an isolated scan server using a one-hour access token for that single repo, and the clone is deleted as soon as the scan ends. We keep only the results (score and masked findings).
Revoke anytime: GitHub → Settings → Applications → Installed GitHub Apps → ShipCheck → Configure → Uninstall or remove repos.
Built by Jaco Pelser, founder of ReeferTechPro (reefertechpro.com), Auckland NZ.