Skip to content

GitHub source audits ​

Use --github-repo to audit a public GitHub repository without manually cloning it first.

sh
repovista audit --github-repo nordbyte/RepoVista
repovista audit --github-repo https://github.com/nordbyte/RepoVista --github-ref v0.4.0
repovista audit --github-repo nordbyte/RepoVista --bug-findings

Accepted repository values ​

--github-repo accepts:

  • owner/repo
  • https://github.com/owner/repo

--github-ref accepts a branch, tag, or full commit SHA. If omitted, RepoVista uses the remote HEAD branch.

Output ​

RepoVista stores cloned source and report output below the local output root. Run metadata records the source repository and analyzed commit, which later publishing commands use for GitHub permalinks.

Add --bug-findings when the goal is to review publishable bug/security/reliability findings without generating the full architecture, quality, roadmap, and summary reports.

Publishing back to GitHub ​

Only GitHub-source runs can publish selected findings back to the analyzed repository:

sh
repovista publish fnd_abc123def456 --run 2026-05-21T10-00-00-000Z --as issue --dry-run
repovista publish fnd_abc123def456 --run 2026-05-21T10-00-00-000Z --as pr --dry-run

See Publishing.

Released under the MIT License.