"Only this time" lasts until you close the browser. "Permanently" saves it to your RepoGates account, so it applies on every browser you sign in to — and it never overrides a repository later confirmed malicious.
A deep scan downloads into an isolated sandbox with no network access and runs malware, secret, dependency and behaviour checks over the actual files. It takes about a minute and spends one scan credit.
Open the full report Findings are kept for 90 days.
RepoGates gates browser downloads of GitHub repositories. It does not inspect your code and sends only the repository name () to the verdict service. This decision and any override are recorded in your local audit log (extension options).