> For clean Markdown of this page, append .md to its URL. For the complete documentation index, see https://www.superagent.sh/llms.txt.


Protect repositories with PR Security, dependency updates, contributor controls, Red Team, and reviewed remediation.

# Repositories

Repositories are part of your software. They contain source code, dependency
declarations, build and release workflows, and security configuration.

## Available security workers

| Security worker | What it does for repositories |
| --- | --- |
| [PR Security](https://www.superagent.sh/docs/security-workers/pr-security) | Reviews code, workflows, dependencies, contributor risk, and agreement coverage before merge |
| [Secure Dependency Updates](https://www.superagent.sh/docs/security-workers/secure-dependency-updates) | Generates policy-cleared dependency update pull requests |
| [Red Team](https://www.superagent.sh/docs/security-workers/red-team/repositories) | Finds and verifies attack paths through source code and repository configuration |

## Repository settings

[Repository](https://www.superagent.sh/app/repository) lists every GitHub repository Superagent can access through your installed GitHub Apps. It is the hub for per-repo configuration: most product behavior is tuned here, not globally.

### The repository list

Each row shows the repository name, its visibility (public or private), and a capability badge for each installed app: **Security**, **CLA**, or both.

If the list is empty, install a GitHub App from [Integrations](https://www.superagent.sh/app/integrations) and select repositories in GitHub. Repos appear only after an app can access them.

### The repository detail page

Open a repository at `/app/repository/[repositoryId]` to manage settings that apply only to that repo.

#### Security settings

With the Superagent Security app installed, you can:

- Turn **Security scan**, **Supply Chain Scan**, **Contributor trust**, and **Triage Advisories** on or off
- Schedule **Secure Dependency Updates** daily, weekly, or monthly
- Enable **Red teaming**, choose release or calendar triggers, and start a
  manual run
- See recent pull request checks

Supply chain scanning and security scanning are enabled by default. Contributor
trust and advisory triage are enabled by default on public repositories and off
by default on private repositories. Secure Dependency Updates is off by default
and can be enabled per repository. See [Security
scanning](https://www.superagent.sh/docs/security-workers/pr-security/security-scanning), [Supply chain
scanning](https://www.superagent.sh/docs/security-workers/pr-security/supply-chain-scanning), [Contributor
Trust](https://www.superagent.sh/docs/security-workers/contributor-trust), and [Secure Dependency
Updates](https://www.superagent.sh/docs/security-workers/secure-dependency-updates).

For repository Red Team setup and results, see [Repositories](https://www.superagent.sh/docs/security-workers/red-team/repositories).

#### CLA settings

With the Open CLA app installed, you can:

- Assign an **Agreement** template version
- Choose the signing mode: in-app Markdown or Dropbox Sign
- Review CLA check status and linked documents

The GitHub check name is `Contributor License Agreement`. See [Contributor Agreements](https://www.superagent.sh/docs/security-workers/contributor-agreements).

#### Contributors on this repo

The detail page lists contributors with activity on this repository, with CLA and trust columns when the corresponding apps are installed, and links to their org-wide [Contributor Trust](https://www.superagent.sh/docs/security-workers/contributor-trust) profiles.

## Human control

GitHub checks, branch protection, CI, code review, and merge approval remain the control boundary for repository changes.

## Next steps

- [Connect GitHub](https://www.superagent.sh/docs/connect/github)
- [Configure PR Security](https://www.superagent.sh/docs/security-workers/pr-security)
- [Run repository Red Team](https://www.superagent.sh/docs/security-workers/red-team/repositories)

---
Source: https://www.superagent.sh/docs/concepts/repositories
Index: https://www.superagent.sh/llms.txt