GitHub App
Install the Prismor GitHub App to get automatic security scanning on every pull request complete with inline vulnerability comments and one-click AI-powered fixes.
What You Get
PR Security Comments
Automatic vulnerability reports posted as PR comments on every pull request.
One-Click AI Fix
Open a fix PR instantly with an AI-generated patch for each finding.
Zero Config
No YAML, no tokens, no CI changes, just install and go.
Installation Steps
Click Install GitHub App
Head to the Prismor GitHub App page and click the Install button to begin the installation flow.
Install Prismor GitHub AppChoose an Account or Organization
Select the GitHub account (personal or organisation) where you want to install the app. You must have admin access to the account or org.
Select Repositories
Choose whether to grant access to all repositories or only specific ones. We recommend starting with a single repository so you can test the integration first.
You can always change the repository selection later from your GitHub App settings.
Review & Approve Permissions
GitHub will show you the list of permissions the app requires. Prismor requests the minimum permissions needed to read code, post PR comments, and create fix pull requests.
- Pull requests — Read & write — to post security comments and open fix PRs
- Contents — Read — to analyse your code and dependencies
- Metadata — Read — repository metadata (always required by GitHub)
Open a Pull Request
That's it! Open any pull request in a connected repository. Prismor will automatically scan it and post a security comment with findings and one-click AI fixes.
Managing the Installation
You can update the repository access or uninstall the app at any time from your GitHub settings.
Troubleshooting
No comment appeared on my PR
Check that the repository is included in the app's repository access list. You may have selected "Only selected repositories" during install — visit your GitHub App settings to add the missing repo.
I don't have admin access to install the app
Ask an admin or organisation owner to complete the installation. They can do this from the GitHub Apps marketplace or via the install link above.
I want to remove the app from a repository
Go to GitHub Settings → Applications → Installed GitHub Apps → Prismor → Configure, then remove the repository from the access list.