Install in minutes · no agents to host

Install the Remedi GitHub App

One click from the GitHub marketplace. Read access to your dependency graph and write access to open pull requests — nothing else. Remedi watches your lockfiles, opens a PR the moment a published advisory matches.

  • Read scoped
  • Open PRs only
  • Uninstall anytime

Public and open-source repositories are free. Private-repository scanning requires a verified Solo or Team subscription from the pricing page.

Three steps to live patching.

The short path from a fresh install to a reviewable PR — no agent runtime to host, no secrets to mint, no token to manage.

  1. 01authorize

    Authorize on GitHub

    Click Install and grant the App exactly three scopes — Contents: Read & write, Pull requests: Read & write, Metadata: Read-only — and nothing else. You can revoke any scope from the GitHub settings page at any time.

  2. 02choose repos

    Pick the repos Remedi watches

    GitHub prompts you to choose: one repository, a curated selection, every repo in your org, or all the new ones added from here on. Change the selection anytime from Settings → GitHub Apps → Remedi.

  3. 03relax

    Sit back

    Remedi opens a pull request when it finds a patchable CVE that matches your dependency graph — first scan typically lands within 24 hours of install. Watch the dashboard for live patches as they go up.

Questions before you install.

The four questions we hear most — read or skip; the full docs live one click deeper from the dashboard.

Exactly three scopes — and we cannot request more from the GitHub App registration:

  • Contents: Read & write — reads lockfiles and pushes the patched commit to the patch branch.
  • Pull requests: Read & write — opens the auto-fix PR that reviewers see and merge.
  • Metadata: Read-only — the minimum scope GitHub requires for any App to be installable.