Enterprise users can register/login with an organization email. If RepoTrace has a server-side token configured for that email domain, logged-in scans use that org token instead of the public RepoTrace token. Users do not need to paste GitHub secrets into the browser.
Protected by HTTP Basic auth. Supports ADMIN_USERNAME/PASSWORD plus optional TEST_ADMIN_* or ADMIN_USERS_JSON in .env.
Paste one GitHub repo URL per line. RepoTrace will scan them concurrently and show cross-repo links.
Save the currently analyzed repo and reload your investigation index later.
Scan public repositories for a GitHub user or organization and rank them by risk. This stays RepoTrace-only: repo intelligence, not payload triage.
Create a baseline snapshot, then run again later to detect new commits, new/deleted files, new domains/IPs, and risk changes. Optional email alert fires only when changes are found.
Click any file’s History button below, or manually enter a path.
Compare two repos for shared domains, emails, contributors, risk posture, and similar file paths.