repository scanning