Point it at your repository.

The same assessment the CLI runs, against any public repository. Nothing is executed, nothing is stored, and no credential of yours is involved.

Public repository

This path reads at most 60 files over the GitHub API, chosen by how often they carry a finding. A local run reads the whole tree and can decide checks this one leaves unproven:

$ npx @voeu/cli inspect --repo .