Company

Security

IntentLint sees repository content in order to enforce your rules. Access is limited to what the GitHub App installation allows.

GitHub App

You choose the repositories. IntentLint uses short-lived installation tokens. Webhooks are verified with the GitHub signature. The App publishes one Check. It opens a pull request only when you ask it to change .intentlint.yml or the agent instructions.

Checks and silence

A policy failure and an infrastructure failure are different Check conclusions. If evaluation cannot finish, IntentLint says it could not complete. It does not invent a rule violation.

Accounts and billing

Dashboard sessions are http-only cookies. Card data is collected by Stripe, not stored by IntentLint. Organization roles decide who can manage repositories and billing.

Report a problem

Email support@intent-lint.com with the repository, the time, and what you observed. Please do not include secrets in the report. We will reply from that address.