Home / Help centre / Targets & repositories
Targets & repositories
Does Cyberlop scan the latest code from my repository each time?
Yes. Every white-box scan clones the latest code from the target's repository branch when it launches. The clone lives in an isolated workspace and is wiped when the scan ends, so nothing is cached across scans. Only commits pushed to that branch count.
The short version
Each scan starts with a fresh clone. The target page says so in a note under the details: "Scans clone the latest from this repository at launch."
How it works in Cyberlop
When you press Scan, Cyberlop pulls the branch named on the target. The first step reads the cloned code and builds a map of the app. Later steps test the running app against what they learned, and a typical scan of a small app takes roughly an hour.
| Question | Answer |
|---|---|
| Which branch? | The one in Repo branch on the target, main by default |
| Which commit? | The latest on that branch at launch. A white-box scan page shows the commit. |
| Is code kept after the scan? | No. The workspace is wiped when the scan finishes. |
| Do unpushed changes count? | No. Only code on the remote branch can be cloned. |
A self-hosted scan agent works the same way, except that it clones the code inside your own network, so the source never leaves it. Cloud scans use Cyberlop's own infrastructure instead.
A private repository needs a read-only Git token. Without one, the clone treats the repo as public and may fail.
What to do next
Push your fix, then scan again. A later scan that no longer finds an issue marks it Fixed. If it returns, it becomes a Regression. To scan a different branch, create a new target that names it. See how to scan another branch or what to do when the wrong branch was scanned. For other questions, use /contact.
Related questions
- Why did my scan test the main branch instead of my feature branch?
- How do I scan a branch other than main?
- I fixed the code, but the finding is still open. Why?
- Can Cyberlop change anything in my repository?
- How do I connect a Git repository to a target?
Connect a repository to Cyberlop for white-box scans
Step-by-step, with annotated screenshots.
Updated · Back to the help centre
Still stuck?
Tell us what you see on screen and an engineer will help you sort it out.