Send the finding. Get back a patch that carries its own test.
Fix flow works from the finding, never from your repository. The finding already carries the file, the line, the rule and the reproduction, so nobody needs a token that can read your source. Paste one below and Margyn prepares a tracked request. Fulfilment is included with Solo Fix ($19 a month, one fix) and Fix flow ($79 a month, three).
What happens next
Preparing a request opens a tracked issue you can watch. Only the finding's location, rule and reproduction are included, never the code snippet a finding sometimes carries, so preparing a request cannot put your source anywhere public. Edit anything before you submit. A fix comes back as a patch carrying a test that fails before it and passes after, within five working days, or that month is refunded. If a fix genuinely cannot be written from the finding alone, we say so and it does not count.
Preparing is open to anyone. Fulfilment is what the Solo Fix and Fix flow plans buy.