> ## Documentation Index
> Fetch the complete documentation index at: https://docs.borghq.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Dependency Scanning

> What dependency scanning needs, and what to do when Odin can't list your repositories

**Dependencies** lists every package your repositories depend on, which versions are vulnerable and whether your code can be exploited through them.

## What it needs

**1. Connect GitHub**

Install the Borg Security GitHub App from **Management > Integrations**. See the [GitHub integration](https://docs.borghq.io/platform/integrations/github.md).

**2. Give the App access to your repositories**

Odin can only scan repositories the GitHub App can read. You can change this at any time from your GitHub organisation settings.

> [!NOTE]
>
> Dependency scanning works with GitHub repositories only. GitLab, Azure DevOps and Bitbucket connections are not used for dependency scans.

## When Odin can't list your repositories

If the GitHub connection can't be used, **Dependencies** shows the reason and asks you to reconnect GitHub instead of listing repositories. Open **Management > Integrations** and select GitHub:

* **Suspended**: the GitHub App is suspended in GitHub. Unsuspend it in GitHub under **Settings > GitHub Apps**; Odin picks the change up automatically.
* **Disabled**: the connection is turned off in Odin and shows **Paused**. Switch it from **Disabled** back to **Enabled**.
* **Not installed**: the GitHub App is no longer installed. Connect GitHub again from the same page.

Once the connection is live, your repositories appear on **Dependencies** and you can start a scan.

If the repositories don't load for any other reason, **Dependencies** offers **Try again** instead.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.