Scan workspace
Run a real scan on a registered app and validate the findings before you wire your pipeline.
Registered app
Branch
(optional)
Run security scan
Additional repos
(optional — e.g. a separate infra / Terraform repo, scanned together)
Add repo