Skip to content

Security and your code

What Omnishown can see, and what it can't.

Plain answers about access, storage and AI processing. Omnishown is in pilot, so some answers are still being finalised. We publish each one before any pilot repository is connected.

True by design

You choose the repositories

Omnishown is installed as a GitHub App. It can only review the repositories you select during installation, and you can change that list at any time in GitHub.

Changes arrive as pull requests

Omnishown proposes fixes as pull requests in your repository. Your site changes only when a fix is merged, and every non-trivial change waits for a person.

Everything is visible

Every proposed change is a readable diff with a reason. There are no hidden scripts on your live site.

What we publish before the pilot connects a repository

We won't show security badges we haven't earned. Instead, we'll answer these questions here, in plain language.

  • Exactly which GitHub permissions Omnishown requests, and why each one is neededBeing finalised
  • Where your code is processed, and whether and for how long any of it is storedBeing finalised
  • How the AI model processes code, checked against the provider's data-use termsBeing finalised
  • What is deleted when you uninstall the appBeing finalised
  • How to report a security issue, and how fast we respondBeing finalised

Questions about your code?

Join the pilot list and ask us anything before you connect a repository.

  • No card, no commitment
  • Every fix arrives as a pull request you approve
  • Planned pricing from ₹2,999 per site per month
I am