typofix
pipenv install
Create a Read-Only GitHub token
Enter your GitHub token into the gha_scanner.config file. Optionally, copy the gha_scanner.config file somewhere else and pass it to scanner.py with -c/--config.
pipenv run python3 ./scanner.py
The policy scanner logs to logs/gha_scanner.log by default.