RedNest
GitHub App

GitHub App

Install RedNest on repositories for Dig scans, threat models, and automatic pull request security reviews.

View Markdown

The RedNest GitHub App connects repositories you choose so RedNest can map them, run manual Dig scans, review pull requests, and check fixes on the default branch.

Install

  1. Sign in at Get started.
  2. Open Repos and choose Add repositories.
  3. Pick your personal account or an organization, then the repositories RedNest may read.
  4. Complete the install on GitHub and return to RedNest.

You can change repository selection later from the installation settings link in Settings.

What the App enables

  • Recon — builds a threat model when a repository is ready to scan
  • Manual Dig / deep scan — from the repository page
  • Automatic pull request reviews — Checks (and inline comments on private repos)
  • Fix checks — when you push to the default branch

See How scans work for behaviour and limits.

Organization sponsorship

Automatic PR reviews and repository mapping for an organization need an accepted scan sponsor: a GitHub administrator whose scan allowance funds those automatic reviews. Accept sponsorship in Settings. Without a sponsor, automatic org scans stay blocked even if individuals still have personal free or holder allowances for other flows.

Access

RedNest follows GitHub permissions. People with push access (or higher) can see findings and start Dig scans on repositories they can push to.