Skip to main content
Dependencies lists every package your repositories depend on, which versions are vulnerable and whether your code can be exploited through them.

​
What it needs

1

Connect GitHub

Install the Borg Security GitHub App from Management > Integrations. See the GitHub integration.
2

Give the App access to your repositories

Odin can only scan repositories the GitHub App can read. You can change this at any time from your GitHub organisation settings.
Dependency scanning works with GitHub repositories only. GitLab, Azure DevOps and Bitbucket connections are not used for dependency scans.

​
When Odin can’t list your repositories

If the GitHub connection can’t be used, Dependencies shows the reason and asks you to reconnect GitHub instead of listing repositories. Open Management > Integrations and select GitHub:
  • Suspended: the GitHub App is suspended in GitHub. Unsuspend it in GitHub under Settings > GitHub Apps; Odin picks the change up automatically.
  • Disabled: the connection is turned off in Odin and shows Paused. Switch it from Disabled back to Enabled.
  • Not installed: the GitHub App is no longer installed. Connect GitHub again from the same page.
Once the connection is live, your repositories appear on Dependencies and you can start a scan. If the repositories don’t load for any other reason, Dependencies offers Try again instead.