GitHub

Automated code security reviews, secret scanning, and dependency analysis.

Available now Code & DevOps Included, no add-on fee

Connect GitHub Setup guide

● How a finding becomes an issue

finding.severityissue label

Critical → severity:critical

High → severity:high

Medium → severity:medium

Low → severity:low

Info → severity:info

what it does

GitHub, wired to your findings

Connect your GitHub repositories for comprehensive security analysis. Lorikeet Security scans your code for vulnerabilities, exposed secrets, insecure dependencies, and configuration issues. Findings are reported directly in your dashboard with links to the affected files and remediation guidance.

Repository-level security scanning and code analysis
Secret detection for API keys, tokens, and credentials
Dependency vulnerability analysis via manifest files
Pull request analysis for security regressions
GitHub Issues creation from security findings
Branch-aware scanning with configurable target branches

setup

Connected in 3 steps

No engineering time on our side and none on yours. Most teams have this running before their coffee goes cold.

Authorize GitHub

Connect your GitHub account and select which repositories to scan.

Configure Scans

Choose scan types: code analysis, secret scanning, dependency checks, or all of the above.

Review Results

Findings appear in your Lorikeet Security dashboard with direct links to the affected code.

What you will need

Access token PAT with issues:write on the target repo

Owner Org or user the repo sits under

Repository Where issues are opened

in practice

How teams run it

Pre-Merge Security

Scan pull requests for security issues before they reach your main branch.

Secret Leak Prevention

Detect accidentally committed API keys, tokens, and passwords across your repositories.

Supply Chain Security

Monitor dependencies for known vulnerabilities and get alerts when new CVEs are published.

nearby

Pairs well with

GitLab

Repository scanning, merge request analysis, and CI/CD security for GitLab.

Jira

Auto-create Jira tickets from findings with severity-to-priority mapping.

Custom Webhooks

Build your own integrations with HMAC-signed JSON payloads.

Put GitHub on your findings

Every integration is included with your workspace — there is no add-on fee and no per-seat charge. Connect it from the dashboard, or talk to us first if you want it scoped into an engagement.

Open the dashboard All integrations