Give Crestwell read-only access to the repositories you choose, so Crestwell Risk Scan can add your code activity to its report.