Scan Your Repo Guide

01Overview

The Tomosu AI web app lets you scan any repository without installing an extension or setting up a CI integration. Sign in, paste your repository URL, and Tomosu runs a full reliability analysis across eight production-readiness dimensions, returning a PRI score from 0 to 100.

Works with any public or connected private repository — no local setup required
Produces the same PRI score and recommendations as the VS Code extension and GitHub App
Results are exportable as PDF or JSON for sharing with your team or feeding into your CI pipeline
Scan history is saved to your account for trend tracking in VisionBoard

Also available in your editor. For real-time analysis as you code, install the VS Code extension. For automated PR reviews, set up the GitHub App.

02Connect Your Repo

1

Enter your email address

Go to tomosu.ai/start and enter your work email address.

Tomosu AI web app dashboard showing the main interface with connected repositories and recent scan history. — Fig. 1 — The Tomosu AI web app dashboard after sign-in

2

Add a repository to scan

Click Add Repository (or New Scan) and enter your repository URL. For private repositories, you will be prompted to authorise Tomosu via GitHub OAuth so the scanner can read your code. Public repositories can be scanned without any OAuth step.

Tomosu AI web app showing the Add Repository flow with a URL input field and GitHub OAuth authorisation option. — Fig. 2 — Adding a repository to scan

3

Confirm the repository and configure the scan

After Tomosu detects the repository, you will see a summary of the project structure, primary language, and detected package files. Confirm the details are correct, then click Start Scan to begin the reliability analysis.

Tomosu AI web app showing the repository confirmation screen with detected project structure, language, and package files before starting a scan. — Fig. 3 — Repository detected — confirm and start the scan

03Running a Scan

A scan analyses your repository against eight reliability dimensions and produces a Production Risk Index (PRI) score. The analysis is read-only — it never modifies your files or creates commits.

4

Monitor scan progress

The scan progress screen shows which reliability dimensions are being evaluated in real time — Fragility Index, Governance Compliance, Code Volatility, and more. A typical scan on a mid-size repository completes in under three minutes. You can leave the page and return; the scan continues in the background and you will receive an email when it finishes.

Tomosu AI scan progress screen showing real-time evaluation of reliability dimensions including Fragility Index, Governance Compliance, and Code Volatility. — Fig. 4 — Scan complete — all reliability dimensions evaluated

04Reviewing Results

When the scan completes, you land on the results page. The top of the page shows your overall PRI score and a breakdown of all active sub-indexes. Below that, all recommendations are listed, grouped by category and ordered by production impact.

5

Review your PRI score and sub-index breakdown

The results panel shows your overall PRI score out of 100, colour-coded by risk level (green ≥ 70, amber 40–69, red < 40), followed by individual scores for each active index. Indexes that could not be scored (e.g. Runtime Signals without a connected log agent) are shown as “No data” with a link to connect the relevant integration.

Tomosu AI scan results showing overall PRI score, sub-index breakdown with colour-coded risk levels, and a list of prioritised recommendations. — Fig. 5 — Scan results: PRI score and sub-index breakdown