Support

Contact

Email needlylabs@gmail.com. Include the request reference, approximate UTC time, source type, and visible error text. Never email source, reports, repository tokens, passwords, or personal data.

Plans and billing

Free includes three completed reviews per calendar month. Pro is $12 USD per month for 50 completed reviews, shared across the web app and GitHub Action. There are no overages, annual commitments, or team-seat minimums. Checkout and billing management are hosted by Paddle.

Read the terms of service and refund and cancellation policy before subscribing.

GitHub Action

Sign in, create a Code Audit Studio access token, and save it as theCODE_AUDIT_TOKEN Actions secret. Use the workflow shown in the app. The Action requests only read permissions, never checks out or executes repository code, and writes the report to the job summary.

Workflows triggered from forks and Dependabot are skipped because GitHub does not provide ordinary Actions secrets to those pull-request events. Do not switch the workflow to pull_request_target.

Supported source

• A public GitHub repository root URL on its default branch.
• A public GitHub pull-request URL with bounded patch and source context.
• Pasted code or configuration.
• A pasted unified diff or patch for before/after analysis.
• Up to 30 selected common text/source files.
• Up to 80,000 UTF-8 source bytes per analysis.

Direct private-repository URLs are not supported in the web app. Eligible same-repository private pull requests can be reviewed through the read-only Action. Fork and Dependabot workflows are skipped when GitHub withholds the required secret. Arbitrary remote branches, archives, binaries, generated dependencies, and executable uploads are not supported.

Safe workflow

1. Remove secrets, credentials, personal data, and unrelated files.
2. Choose one report type and add a narrow optional focus.
3. Generate the brief and verify every material claim in the source.
4. Copy, download Markdown, or print/save PDF if the report is useful.

Troubleshooting

An unsupported or oversized selection is rejected before analysis. If an account reaches its monthly allowance, wait for the displayed reset or manage the plan from the account panel. If a model request times out, submit a smaller, more focused source selection. Cancelling a browser request stops the active request when the upstream provider honors cancellation.

What the app will not do

Code Audit Studio does not run code, install dependencies, change or write repositories, submit reviews, guarantee vulnerability detection, or replace manual engineering judgment.