Team Coverage
-
Repos with at least one team grant
Connect one GitHub org, wait for the first sync, and see the most obvious access problems before you create an account.
Read access is enough for the audit: orgs, repos, teams, and team permissions. Write access is only needed later if you want repod to apply changes. We encrypt tokens at rest, keep this public audit session for 24 hours unless you claim it sooner, and do not keep unclaimed audits on a recurring sync loop.
If your org requires approval for fine-grained PATs, an org owner must approve the token before repod can read private org data.
| Area | Permission | Level |
|---|---|---|
| Organization | Members | Read |
| Organization | Organization private repositories | Read |
| Repository | Metadata | Read |
| Repository | Administration | Read and write |
No write permission required for the free audit. Apply/fix actions can ask for more later.