Before starting please make sure you have:

• A publicly available Git repository.
• A publicly available URL to an audit report that covers your project.
• The Git commit hash the audit was performed against, or the closest hash (?) if the commit history has been rewritten since then.