Velocity only requires Read access to your code, and we use GitHub Apps to connect to your GitHub organization. This setup enables you to be specific about which repositories you choose to grant us access to.
Additionally, in order to import a repository from GitHub to Velocity, you must be an Owner or Admin of the GitHub repo.
Our Security page has more details about our security procedures https://codeclimate.com/security.