Connecting GitHub
What the app asks for, what it can do, and how to take it away.
What it asks for
Read access to the repositories you select, and nothing else. It cannot see a repository you did not tick, and it cannot push.
Fix delivery — opening a pull request — is a separate permission you grant later, deliberately, and can withdraw without disconnecting.
Revoking it
From our side: Settings → Integrations → Disconnect. From yours: your GitHub organisation’s installed apps page. Either works, and neither needs the other.
Disconnecting stops scanning. It does not delete findings, fixes or proofs — those are yours and stay exportable.