GitHub Integration — Import a repo by URL
Decoder accepts any public GitHub URL: it pulls the tree and runs the same analysis pipeline as a ZIP upload.
What it is
A way to analyse code that lives on GitHub without downloading it yourself.
Why it's useful
One paste and you're scanning.
How Decoder implements it
Enter the URL on the homepage, Decoder fetches and analyses.
When to use it
Auditing OSS, reviewing a PR you didn't write, exploring a new project.
When NOT to use it
Private repos — use ZIP upload for those today.
Practical example
Paste github.com/owner/repo, hit Analyse, get findings in under a minute.
FAQ
Glossary
- Tarball
- Compressed archive used to fetch a repo snapshot.
Related
Repository Analysis turns a codebase into something you can read, search and interrogate. Upload a ZIP or import a public GitHub project; Decoder indexes structure, runs static checks and gates AI features behind your own key.
ZIPs are the most common way to ship code and the most abused way to ship malware. Decoder ingests a ZIP server-side with hardened guards and exposes its content for review.
Most code in any modern project isn't yours. Decoder reads manifests and lockfiles to map the dependency surface and flag suspicious entries.