🔐 Trust update: PipeAudit now uses a GitHub App

The previous OAuth flow showed "read and write access to all repositories", the smallest OAuth scope available, but understandably scary. Several people reached out saying they backed out at that screen.

We've migrated to a GitHub App. GitHub now shows "Read access to code and metadata", the minimum possible access to analyze your workflow files.

If that was your blocker, it's gone. Give it a try: pipeaudit.dev