Roles & permissions
Organization roles, per-repository grants and teams.
Access is two-layered: an organization role, plus optional per-repository grants.
Organization roles
- owner — full control including billing and ownership.
- admin — manage integrations, repositories, members and settings.
- member — day-to-day use: view reviews, triage findings.
- viewer — read-only.
Per-repository roles
Organization roles answer tenant-wide questions; repository roles answer resource questions.
- viewer — see the repo and its reviews and findings.
- reviewer — trigger reviews and triage findings.
- repo_admin — edit repo settings and manage its access.
Grants can be made to an individual or to a whole team, and a user's effective role is the highest grant that applies to them.
Account security
Two-factor authentication (TOTP) with single-use recovery codes, argon2id password hashing, breach-corpus checking on new passwords, and refresh-token rotation with theft detection.