The GitHub App anchors every release you publish in the repositories you picked: one proof per release file, from the SHA-256 GitHub reports, counted against the connected account's monthly allowance. No file is downloaded. How it works.