The engine goes to the code.
The code never goes to the engine.

your machine / CI the code · the engine · the check the record scan results only results · never source
anonymous · names + SHAs hashed on your runner
keyed · itemized scan metadata, never source
VPC · nothing leaves at all
the full metadata contract →