Check every push. Sign off what ships.
GitHub connections are being switched on. Until then, audit a public repository by link or upload a .zip of your code.
A free check on every push
Each push to your main branch gets a SafeLaunch check right next to the commit on GitHub, in about a minute.
Private repositories
Check private code without uploading a .zip. Only the repositories you pick are visible to SafeLaunch.
Sign off the exact commit
When a version is the one you ship, verify that commit. The signed record names it, so later changes aren't covered by mistake.
Fixes as a pull request
With Launch Fix, open every fix as a pull request on a new branch. Review it, merge it, done.
Set up
Four steps, about two minutes.
You'll need a SafeLaunch account and access to the repository on GitHub. Nothing changes in your code.
- 1
Click “Connect GitHub”
From Projects in SafeLaunch. You'll get a one-screen briefing, then GitHub opens.
- 2
Choose your account
Pick your personal account or the organisation that owns the code.
- 3
Pick the repositories
Choose “Only select repositories”, tick the ones to check and click Install.
- 4
Create the project and push
Back in SafeLaunch, pick the repository and markets. Your next push shows a SafeLaunch check on GitHub.
Day to day
How it works once you're connected.
- 01
You push
Work as usual. Nothing to install or configure in your code.
- 02
Free quick check
SafeLaunch checks the commit and posts a score on GitHub. Not a sign-off.
- 03
Verify what ships
Pick the commit you're launching. One verification runs the full audit.
- 04
Signed record
A version-locked sign-off with a public link you can share.
Quick checks are free and unlimited. Each verification uses one from your monthly plan — Pro includes 4 a month from $49 — or is paid on its own. See monthly plans
Permissions
What the app asks for, and why
Contents
Read & write
Read your code at the commit being checked. Write only creates a new branch for a fix pull request you ask for.
Checks
Read & write
Post the quick-check result next to each commit.
Pull requests
Read & write
Open the fix pull request when you click the button.
Metadata
Read
See repository names and default branches. GitHub requires this for every app.
Never
What SafeLaunch won't do
- Push to your existing branches or merge anything
- See repositories you didn't select
- Read issues, secrets, Actions or settings
- Keep a copy of your source code
- Remove access any time on GitHub: Settings → Applications → SafeLaunch → Configure.
If something looks off
Troubleshooting
“That GitHub link expired”
The connection link is valid for an hour. Click Connect GitHub again from Projects.
“Linked to another SafeLaunch account”
Someone else already connected that GitHub installation. Sign in with that account, or ask them to remove it on GitHub.
My repository isn't in the list
It wasn't selected on GitHub. Click Add repositories, tick it, save, and you'll come straight back.
Organisation repository is missing
An organisation owner has to approve the install. GitHub emails them the request.
No check appeared after a push
Checks run on the default branch only, and only while “Quick-check every push” is on for the project. They take about a minute.
Ready when you are.
No GitHub? A website link or a .zip still gets you a full audit.