From 68975f9d94da305b9d3a979196819238a3d3990d Mon Sep 17 00:00:00 2001 From: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> Date: Wed, 7 Oct 2026 09:15:25 +0000 Subject: [PATCH] docs: document the Code review comments setting Co-Authored-By: rheza paleva --- code-review/config.mdx | 4 ++-- code-review/findings-feedback.mdx | 2 +- code-review/overview.mdx | 2 +- code-review/troubleshooting.mdx | 2 +- images/code_review_comments.png | Bin 0 -> 18206 bytes platform/organization-settings.mdx | 24 +++++++++++++++++++++++- 6 files changed, 28 insertions(+), 6 deletions(-) create mode 100644 images/code_review_comments.png diff --git a/code-review/config.mdx b/code-review/config.mdx index f831b36..28642da 100644 --- a/code-review/config.mdx +++ b/code-review/config.mdx @@ -170,7 +170,7 @@ release branches except `release/legacy/**`. ## Include scans -Use the include block to scan **only** pull and merge requests that match specific rules. Hacktron records a skip check comment on PRs/MRs it doesn't scan. +Use the include block to scan **only** pull and merge requests that match specific rules. Hacktron records a skipped check on PRs/MRs it doesn't scan and, if [code review comments](/platform/organization-settings#code-review-comments) are on, a skip comment. ```yaml include: @@ -204,7 +204,7 @@ include: ## Fail the check on findings -By default, the Hacktron check is green as long as the scan completes. Findings are posted as inline comments but don't block the merge. Configure a severity threshold to turn the check **red** when a finding is at or above that level. +By default, the Hacktron check is green as long as the scan completes, and findings are posted as inline comments but don't block the merge. Configure a severity threshold to turn the check **red** when a finding is at or above that level. ![Failed check example](/images/fail_on_failure_example.png) diff --git a/code-review/findings-feedback.mdx b/code-review/findings-feedback.mdx index 2e6b1fd..bd60a61 100644 --- a/code-review/findings-feedback.mdx +++ b/code-review/findings-feedback.mdx @@ -3,7 +3,7 @@ title: "Findings and feedback" description: "Understand where Hacktron posts Code Review findings and how feedback improves future reviews." --- -Hacktron posts Code Review findings where developers already work. +By default, Hacktron posts Code Review findings where developers already work. Admins can turn this off in [Code review comments](/platform/organization-settings#code-review-comments). ## Inline findings diff --git a/code-review/overview.mdx b/code-review/overview.mdx index e48c0ab..94be089 100644 --- a/code-review/overview.mdx +++ b/code-review/overview.mdx @@ -3,7 +3,7 @@ title: "Code Review" description: "Use Code Review to run continuous pull request security reviews across connected repositories." --- -Code Review reviews pull requests and merge requests in the repositories you enable. Hacktron reads each change with repository context, looks for exploitable vulnerabilities, and comments directly on affected code so engineers can fix issues before merge. +Code Review reviews pull requests and merge requests in the repositories you enable. Hacktron reads each change with repository context and looks for exploitable vulnerabilities. By default, Hacktron comments directly on affected code so engineers can fix issues before merge. Use Code Review for continuous security coverage on day-to-day development. For broader, scoped assessments of a repository or application, use [White-box Pentest](/white-box-pentest/overview). diff --git a/code-review/troubleshooting.mdx b/code-review/troubleshooting.mdx index 128c89d..47adaa6 100644 --- a/code-review/troubleshooting.mdx +++ b/code-review/troubleshooting.mdx @@ -36,7 +36,7 @@ If only some pull requests or merge requests are reviewed: ## Developer is not covered If a developer is not covered by a Code Review seat, -Hacktron leaves a pull request comment explaining that no seat is assigned. +Hacktron marks the check as skipped. If [code review comments](/platform/organization-settings#code-review-comments) are on, Hacktron also leaves a pull request comment explaining that no seat is assigned. Check **Billing** to confirm the organization has trial or paid review capacity available. diff --git a/images/code_review_comments.png b/images/code_review_comments.png new file mode 100644 index 0000000000000000000000000000000000000000..246d8d29313f0d1fb34023c56bc2958b48ea828b GIT binary patch literal 18206 zcmeIaWmHuC_co452?8o5B?uxNlF}eZNS8>fbPU~Hf=HKicXtda3ew#ST|>tVIYT_h z=YC#%<^HbqU+ce~H_uwXH?vrC&YVx|{n`7vuDuT-%8Jss*ksr!C@8qHGLot&C}_06 z-w9Y4z$d#-bR!B1cCERDgtDxJ1hulgjfuIHF$#)INPGgOa_lT|_u;wM_KR9EwA{c& zv~9GgC+=IVvskjeVqc#>Qm>@0ZbW7N_7#f(r->?Y`6)7ZU4 z>3Pgu-pr}S-Q}YE{z(pQwh(uhESJ!$t_R~`(HTP_Sa2~dd=%8AL1OxQV)bHcCoGCj zw1b7}zJH18C&^9?t(McC!)EKFWFXJtr->`r;d*kTO22KxLy*feyZ3@|c+YqaEB)$W zv~MfoRw&{YWRBXqM;25V8{5_PX{*pbefF@3`6`b^9t%6&Sj0uZCpng`ExKl)_vmZN z#zXPfmfyivNtf*=wYpS{8#etJ6YhIEk8}QT4>~(tg~kV`1`Gnb@5{+WXy$< zx?`q>6(hc;Z?Jf)N7Xh=*xrIE@Xd8u9>gAep+B+9(3#e8$1^AOnH9{SOG`ES~eVO*B!)Z%(I zFo91T@M~i1U_rcJhgh_OjnPh6R{8}?AQ9WHI(v)cjt;Nck1(@ zXVB2luDoS?+pfliMiX7ka?I&S@~*YxVpp{mE|I6hzfD(hj+&2xk4%pnj_zM5p^^F% zcYIq`_)3fQz%9`J&Ha^!E5x6oI27aPcL*p$IwaZbc&Y*$BWDy_#3`sFVhLq}UYM$) zF@CA_Qx~_O(R(5Myfq;@dNkTD>OuTU|9YQ#4@ESXWt<+KR4T*!+#@O>if)~C{r);0 zOakVC{pGWmT~4P8C!-F-X&gMxG)}2nUCTl1JBy}st5v*J=pO4VpS>i%7k~adC)f&X z4>q*tTi5R=*uY&EUY~{Su9vJU^(`e(X=E~eU_xWgWh7+gX3$l6s@lm+#^BCqPXs4A zXG+)HE1*%=E5?kMSddweZk3@_{>eznR28Qh_bm>O*@-!vftd-yAkA2zTCOTmHZLb( zhQUp&AjX_UnYWPRl~nL5l0TBq2HukI*032~G@xmxwo*h`%w00Cahd&2^HfzqV}vW0Fl=T(1g>oO@e04UgXx9E1+Ar}{YF&^moskQ9~|miDSZIGw8CD&SJ#M*n6D zhm%$Cm?v8&GbS4+n{o%&6>76-dzNvQ)o8PC_c^}Q6RXHH$c!{Au|!(P)mqjy*L6ER zbfR&BIVL-$@5DHgHia}9H>EYvx@)`pxm%u)oj%(pI3-2&A_PyHPr4sI#LdR#C9NfU zNLu`~`e6+&Ic~;Nl`!4#vGAR+gQsg@q`!-PH;3CK|9DydviGINOFsEeYJzHQ+t%ah z=ribeIDt4j#PfW#DX#{r2gn8y1Lm9eHr+PMHf@M^Si^K0L7%37+7QTbbRfa{DM(hg-W~1TjZW4lOELO&jr9 zRhUxQ7=U~-vO2Lo5puB!ex#hIoDxj6zt}T_CT_b<94pat6{r_r6lA>(3Uv)VW8HC? zvNI8!7C3Jj(OcE?cHDNFbT)3D0*kneJFPYCyO0}^aj7K+C)&)j&UYQq&vy$^2v4~? zy3(YJq<=|Y(Ep|%tsk#H+~U*{+d|$d?P=v@?=fo=8d+#!ZDostsANly3t+V zwX&AIde$AzcBb88c>LoDgbrQqfR#tL$znU+*rFe;Uy(gQXGq_hQ-pHOboe)c)OdB|XB zE~S(Igek6EF6_mUETUSsy0}`TEKJ+YD*h+aO7U)q!h0Ki;l%y4Yc;%=!Lj3DDUZP* z9xuxzOUr5T-6vB{<m4QNIA+HVCj4#{wg za5~Y?`S?M_m(SqBx5$IRsT3E`&HEnK7HuOHb$xD?0me2&zy>~%sJyl8{FvTn&1zF- z>k`}DR!}(v?>keRNy3>8{`{h<6gx8uveNJ}f_Z~?gGW$SkWSEp8I@_yd3%4Z$ugT0 z46}~+&~T`8Ki%A^T9{vGIBVQDFCHyqEWU)%-gaZwiPW(=VK{Ag*m=~Pwat*!RqWFL zRysvao{{X|x{JAHo`0O_z&SlTJ;mL@r3<&s$+f!}iIL#L_jqP)$!S>(%I6`WyeIua zTK|UP7T%h3BP|&DDuRb{T2$Z5-#xn$-9l@Db1Zp&4nho>au_=_GHq5vh8PU^@Y}va zs!y74jMJIQn8JqT(+5Qa=brDlda-Tm`aoer-B81!CGaEnEM)d=SARkad)nb==d{*6 z&&vs-Zf5!l&hmQwn&v6{g)>A5aF~QgLDLKNziy-;3c)G+!lCX%^Y*Py2ldc>IhPME z&2PMRL*fXSgBG8JEKpO)hGX^^nh<|DcNJ+UFqEI zOwZ@p&6S;K!R_QBX}i+H_4dpb2C50NQmSe)0iHc!Px!`a!u<-#ir)q#S6N5Wr{p<& z-M5ZNI6`Ki=ZDTQq}QeEP-BVe;v+oEf!pY0w!1cR&G1Wxx+vw2e@ZmEb(_1n1PE=x+6Pi|+?bEa+ zT~pz6+q1nzkA!~v>mm4$gLF>QO)k^^tKn2|7q9gPpOL6XVkq~}{`&BH^MpZPrhA10 zi`o|j^{)?K0_vw7A$Pw;LH)uc#*wWI=70M4?ZB@eg)LM3ml24lpQ;qjQ#`yg^gT2z zDO|{x$nQPs~(C$C4ss;=`1%bcN*Bl=)r~}XW(l^-guaSK}qCx*PM=Zi(vGbUENgp6&O`6!C%PjBZY#9-J|n`JA(@9u1e%IPA$hmQzMdaxn2bOIntu zSLP((Nf&S`PU5%xKHF#)%kO&RTclP{&R=3+pjM_`CvTL&cdzGSu3wy-zb%xBrB zK7kEe^f*k3Rk8*#X%wqZ6ia#CSxg%VgDuDBpPeBl2lH+w%Rk`qWyw6@QqrDB9qRCT z_;5-|MN=Pz%e>uNjAr>H&dqNb*R?$p^yJL2t}xPk^YNFnAGrGh|K5zK=YFW@wDnfA zpGB@u)EpM-rjx%BF*nh~Giwf=?0e*!+o{4OsaKaf0!;ei7)^%e!Mq=;`X|cu`cJkO z1gj#Q=PN%2B)#6Itohu9t=8)9G~T8Mktlxcuqn@VJw7~N&to~kQIO%CT%=Jl^&E1E zZs2_xKU?JxJlkSklO$-9Za!UK#=l>ie!v^rd)Q|BzFc>^Z=^~B(}hR>)NOMXI-tbX z+8M`guxM&{bA8Ase~ma@;EfbMYvjMZdY*5;(P!OiJ^Qs!E{EafayUBQ=eEYm%d!~+ z9Za#=ecg-B9U*-7p<(a7V6hRhem_5hQuaxF+-qb|K`(iup0e%ky>|WzV~&p zMv1(e2Duk25RyXg3uEVsVxt6;76P zbB#z+&65LPujhkYW`2yN@;k_HkL4*el2Nvkz2<|h%kJjGWvv6OqAYsp2@fkc_0WsDOAaKgPUy5I}ABf zZayHOZ&V>JINMr*y{9&e+3(44IpAl*vipJYdeIfmnj&opk!4TYy}0R$p_3c%IBd5e z;>Q&pd%-vO#P&B<_^YCPrrk?G!MDR|{^ zb|4#Pu%W?^flIM9XTCjVYyw+%(Tm#5&XQ07PWphRftT^rES^t}6#vGFbvP*MbLE1P zxSyuJ*W^Hwa5uWZkcfvbqv>viG4^^-R{~F;hF=N@QlAuZCd8nh9Z2fFf_~6gvsWf8 z2l^PzcW@1*@;|GchkDlg|p!43A6fui_%gjEn zPY0^tlNHzT>o~PA>o2cY0(bJI&kw-WsmEOp8#1Ky&1iaGhLfil?#uXfg|-jY>0Nx0 zdVR7tJ03o!T%gqum-_MkJ*V9%o@VEL`!x4(cjZcnB8lKLliy+N1hWH`4Y;*tcB-G_ zq(6W0ieakw&I*A2+TnCzkAdoqegzvr8l$t)SvK-;;t>i$g=ER4@0nLTF`35w-^+hh zs8DO_A9F$6Y!1$*-Q)Fgo==!-7PK#Ec{#)zkTapEx4QFa2D7CJf_>#P7QN=T@Gs3e zdsN9AAG}1zbU)cTkdm7yQiGr~Sxl5hGsuM!vsx+V#!%8#&F_Ej`w1-rOHKqGG&-O3 zkLAfN6hGmW$*R|kl8!_aL{q;zBjiNxW8tOA6?fN7hslKT+L0gqw>^e%7ps?jHW^GO z()kq5GGj^adD38a5nl4X$igP!gQXyXbzn!ML_yf2OE9r`CK|h=b|m8GNc*q|QmAoe zuRiUnF?Yz4qfD!Libc0^MCkOSaQU-CHm)KAkLBEid?LpvI-Uh&==PyUzrWNY$vky8 z9MLUkc_JotnHKdn4T;^2Cc8B$ z7hQCQI7djRl5t<0lTrXOp4IZc&~s_@K>uEJ?6#$8cJ_knJqD6Ib>caxhJ1#e6}62% zjd}2j0lkM%cSPq%;gfKfvL1Iwo>ajFf({b7aVPQ4GAd_&3>4T+-W5+X5DoS(E`m^S zzc6qh->RV5DsHfj#B!G8o7H)!o$45)rn3C$#{Uu=7-z%5Q%iZt3sQ9M2wjG$4~LTU z3tvd29i8pZfpxgE&sg%;z|%VPdcoACCkK`Q;xK>lMc|Zk5>Xjzolt0YpSUB!{dl#@U#k(? z6#tU#%R((^UZjXcb)QO;7@eA}&9#yIam~*mc-F_!j{BJNGD(fsAA;{>y);y?$Br9I zjz3OQ-6|M*yAiZ&IVPomS|p1{q&uSQ>2#0+DY?Z~Gz$!j2|BU-*@c0-1JV4=Z9U(k zpjh~T34ca$(}maecqNz$>~tdZ_ay@RBJIgCZBOr z)cjVWLFy(W2mC+G3 zm-Q9oAfp_yTOrqSHn*$2A0zd4YdC0!UHz$tiqCZU!e*RW(*_yn_&UD|f3jG^!6(RZ zZ|2x~2y3Hg2pQt!)2JW`CpLrq?s9&Hz91FNk{6qBD@TS1B`Qvcx%n1oZ8Optjy(nJ zgilmjEie^3Yjt0LetYFgNybL+;q(RGD2I_$qusHRY0}OXIj4}A>(R6fVpJ0o;A67h{tDJ;uilc!kXGNhQ zlTSFA%zM*WORrQN^|oL`Epb*t$I&to0epX1Cv_d;>{kCv7{%WxHq#cJlPrv3KHGu& z@5Bz=_L>YmW{K98dn$;N_AVY4o5Fb%)`NJN?R)1eV-d0fnD}jpa1rj`IRyn(i(QO^ zW;f+4D$SjzDc1sUpRnvKm-p_&j9O7TzLwh1V1NDFg?zeYHGUqYI8MlXH$cJI|4QulX`L7s46kT)2tZv z3N5Z2bQ-RI-PZHWudd|1aSO+Mezct`r{o=ig5viY@C-YF(tnXLzpy{f^qP_Mu4DL$ zr2_VUO*!>1J|^}XV0K2SaStEgC6&~QfR$76cJHv5M`F}#fMakfz6-kRWYmx70moDf zcKX+aC_7-rr1W$W|61!;fB-)(_$BbK3q6g%jKgAMp5OI8tj-6I!oH4wqWsqdBVAy| zzh!$L{e3in?OO%TMdx-U-oGwzvH>$*%Qd=tEKpGGfJLr4-pxF~fg>fMe)@mUEMmQl z@&Cn;u6_s}i*6g`9!ru6eU%>R0p!Y4(r6d1v%6M8@k7Pp;LJvG-TQX;Wapz{3uHfs zNSSqlIXM46%o5@42VlJv3|z8gO?|hGt%`>{|2dLhDM3%u$Id@YsLo=N;C5%C$P#gW zXru43Ul+Er{giLXGc<|MM*laA1)J2kZ=GS>hpC0P#Jxn#=9#o1Wi$E9^Ustzf6aHm?Rcs>3XehxFW0o5ix&+w0Ti|x z%AUkEv}L?AZL=IvB9uJ_+vwNx(kOpG@UjugsZ(PT4)H{sY;R_V29eg4!J5w(J#wmL zSwbzPL2)}m7l*euR1PA|qRl%A;!hjeugfgu(l7%s@n3P74#`_36|-G}M1AlSlev52HK9Xc zq+IiM@VRFpKVfM9d1NE7{jBh0j6fVTGu3k6S^jXHYT6eTja_^Tjy0o`=LT1+qJwHm z;oQjc!-llx4yki6v+(75>?VNoUbWwxRt(e(ix}=qm01d=G^7Z7oXrd!DMJ|B$3QO7 zG?y93gM)g?DV+J;BOh!sUDp+5wY+ykT<#|f4woAVDIN#lZVc(06<$hV_ge7j)NSQG z-y7Z!NB-L*S*?ReCioe|ruh^TZ;ua{nqAsby08)tzR;2HY_)L-c-bGvYW4;)Z`Zxg z`v~U2W!y&y?>D&7Ts>lbU+UPclE%ZC3s{{EAN?)H!!4WLv&vbpLjlg`i?noagt=z7 zcmM`}Y+pQcN+^3<=avO{EC_dZkldzaWfSEBvUFo%-ME4QACqIBU4A#TPuQzF@u}?w zv8xxgHmPY~*YO_b)dCE${&#sI9dN)fUwZ$mJ_ zr`vA^uWruUmG-E-pG-&0@lLvBq71_}z_)D&fX4Eqs+?;zQ94t)^tS%7(OI82p_(c(~`;uX4pH0NHGw zULDhKb`mH#rtvLw-|PU|+33R^S7snQ_333j6ZKBT!MK31e7e~qWO|!f zuc_7phygYpJXa5Ly6ZuZmvkfRUO?ol%OQNmLH90>L$BGn4w+%pC{>`dZpiQ}K(|$dr$UXBz==y{~QzTw`drHUVRYm(v(}InE z>*~?~tDx<&Z`rvao9Lw8y*Tsn{AMTnZ}y{;4taphW`|rr ze&$iyp94%=%J0DjG?t}5j?oaZ>TNn(q$XYSu>%#7LCd^4Z$lt28)u zw8}U7;{Kj!T0NAvDHan7y3HkQ*uK3V#1mG21<#_4s2#LW@a|aRu6ZD*un(Zqh znuFSb2-3Uxo7~1$^Azr1R&p6m&gYzF+MaRvvE)@6j~5_WD!;(V;{5=tQ31m`ZG1Ksl$)E{D8n0#0Ymjl3fuCKdCuy;-)X zky5SkPK$8oW5$K1^@8iGSB{p79B(II%{=P>xkdby!Hu++gP(oKcVPSIouF$Ua*13z ztdrO}tao^G)rn3MXT0`1Tvt-MLG&UQ!p_a^hf4Ae;JfX!HKyQ_+dnjo;A6Rd>)c_? zRL&;vhbBk!auAQCfo2nt#@O+97Ohmv)_P4bn#6bCg}67>N$~9;bm;_@*Gx7XCb1=uTQ`m_j2#1ka8}XK zP%z7owqf3&SJU>*_8{MqBY{B>y}u*#z7I6rBLc_XYzFu-RhP$Ms}1+7^`+Yzmxhqd zBG>)8>A`;Xb}PcI5y`J)L@PE_$Cre^*8o|4J{65ARElh?$_t5iz~tT39cfR>4`X!b zV_X1He{Lb~$WlRjM+S~zVWbM5P+pdbjo8Ue*qE!cT%dT&w6xxPm@G}@HNhszH(eO` zG2L!Iama0?$;pxrwi+${>=mGuak?y=O6NdyRP)sL%TJqxH_Mw3?4e!VR6ctz)g}$h zLf$d$nirfpLQCuQsy=_YoUHH$4e>*D1rxe4VionWVYuv}7VSs8H%`T8BdN4`@8a$6 z5s2O^TDqe^XJ(>G>v6mxx`B#ja3?2-5ui9%HqZ?u9)C$G9E%KV+$|Svj3z`d6OpCg z{KUDn&taM9P*tVZh{aoUS-Q?Q9Zr|>F{fq%B*?+V^rOO2gI{J#ZLMjKV4wLqvaEHK z$1SrY7FeFv3n&8Jg3`(+G#$+wpoON|1SpMm^Awfd4( z{``ju8{qs^DbVFJ$f51!q9>fyS|5+7#Vd%pvJN#zZu@HLmTCzo<)sEX`lZd=%?&o$cR9Ct(%o_+ya zEi^fmvm`rmi83aI`ePRx+IoL6y6o4705R}7Dn!+&h*yrDY9r%+FSd#9jSt!TTUfGc zUGtRX=OIV(hK)2G_l`R@=L?47Z=3dnu`2^r-F*rv3Wn^fyF%6F`?{d!9J80E( z%a1S<+S^Z`CeZ#DPCAUb0ulC3Ts{sqr#=elhZ;XmZEqa+A)&%;=j$9c{1ORIzg7S3~ywK^! zpmH@iaO`&6{x$(Sl!)0n0kdIX5eg_K4Il>6|8xdw-ye~Z)bwAK2hgd0`W(|-X}{?B z*oj{e`HaQ?v9ywoit69o*N=uRlRAKk^)XT4(IkF3j>!3L&2{ug$@+#z8+RB#Lp5s0 zazI6{b@S1^2kisxXMVv)IZKL>-g>rL^}_T|qd}~1-0tkUBNAJ2>ZRUnr?{C&da zl=@Z6&XIY|X-hY@!o;Gwq_OOO&mPzjNgT8Q)DEb(C2Od5x`mf*#F#}db9K94-4B3zXbWP;auX;+@d1=9kGVexmwccnS}6&6=<@@}(c53YAIeZ&eId~w zNa*McAsGDm1&2%f>Q}U>6i%XXlGn*-w+T>PDOWe}I*lK-%y{N=WtZb{Yg+&y^+fuN zE9i=d{M@Cb$r`|&k`CLDZ2MmRgQgi?-?Qe!dV>x#8v6#)g&{4sH*t*$)g}uwRfdCOdHpcG^ddD;ZUC-ll5&~I zx4}RDpYmMwTWSiik=;U{4p`9ngYy0Vj&A|jQod1d3{bv1Fu6wH{=S`!rTrr0aYg}|T{Hv2_nai@>HVWlg56}G{*wHJ z?j1!@wsDso-`o#*Z-FwMdMh3PI}Djoaz;Y|h^kv~HNb_;)u;!+U=olxntjaoZ3B6~ z6;Ge-L!N*t4ZHDjK%UwS*4NL^t1g|AJSU((5vRN3eXyll?_a52XTD)A(3_*+=7Cq; z6tTOFfOg8$>YlcO`uI>;x+r8a5e<*pmjbvWb`uKZJo@MBN;E#(QMe*9Mk~}vhB4P++Q}F z2k?SvfJ}y)x6;#m`%UxD!N7hicJIFEVSwmITdfOl{R5lBb9m$mwd9f0kz4itHH`K+ zQKJLv6OZ-$42yPc51_yIxv^-Uloh=%```7)-FeHba_cmgMX>ZwW>})2vsDA-pg_Lk z_E^ZN_Ef$CISIEc%erjzqnS3Z=1YLZjhBZGK>@H@(0Uy`$5E{Bg~%nb3tn)aAmqa(g-B60hja+O89O`G}cbkf;SQbw66KPL7{H?S1_G3$9|wa zi3}3Gn0&Bl4w^33=&!90o!hbn`Y&I90kg30rxn>>o=*Ul9UNDRtX@j1+jBvNxb=zX zTBGX~zc2e7A$oHmwDIfrKdPEhjxVCK14WV}^JB#**oZGgz5_(d*HisPizqBgVLV>} zRQXAq=4lmB&mXU|B!OJ&touK1>MJOr20)>lviI36baS_&-C5HXFr}rU==Diw)A^Fm z5+Hf>?=3V>b6ZXg{OKIn)%AoA%ICBI(Ct$NnKcjK5Ihn=4|##!2H8Dw&uXBY1qWa` znbQoRwu$O*ztO*I8%Bgz4`Y54ZI zC{KnrqKI7B_U8loM8EsP4&BO0PV#!s#~t_`_mdrn%zuZGng9w!y^!GED@Bd~3|!7X zM5h^5z zYR2^y)NKouG8WBeS!dg(}-9ZvQe=o`;d7kA0{b4M}g(@rGZL=juG$n=YWR{XhoQ0%U&3bbvJ zDn}}ucPH+`8IU623a2}hhQqPCq|lWv!$@Hhw$>BX^Jg(CV0+_z(-FP{E(Xu^->p>s zZFZMit=uL9AI_8V&hv$An)gYf{jfmDDILSG^7RCu$D|FDe7$&f9_*0TJCxQu4=o(h z*eBS~Z1Z#@IT`681mz6-erI(MIO(W{3ix_GcEQ7JP;g${xjqK?GFSnqgMHkY6dd(t zO9f@m>2Hj&+D+?wD9~J#Aa-kBTs<3s-T=p9?{cbteM691%T4`<(UNG#unlOs70Gyj z6d#7iX77{_d(z!r=MGa1wv_p%?oi2-rJce0D`w8^4M|QSEe`7}r@<;R*!9+nEwka= zBbWJyS(7E2%`K2x{@DnVt0@HlNu9+_V$q|!KcxCNa>~P6?>PxnbC-J zirqHR(?!iT_rqPJW=4VqW?FZXuS(V%bj`SETIspr6k@5Isgp~4STB9^Z~>=rL`_2; zD-Yei>6jR@?cxf~{-go>Y+Lk!x589(LW~-1nT)&vtXC za=SkEk3bv8q|xWpLgZPfS&_br#*mmr9a68>UH>+em~D&0a*D-a);Iw?)Fa2<2c2cY=3olgL4nc-9p5uX z`u4^Yj1uU*{6~Ex)7=v&#nyM+8X0v$t!hpRV5tND~PO0q?Zv6`22l?yQc_ zn0gAG95x5+4%waZCr6KXlSOG}!9Lfg(@D42OU>cWyf~PL1`=2gjscZV<|$y%!HF`R zZcv-ku1g4KuMFiaAhxbX!MP`q&$q}EhDi(tILJVG!_1f4*M$%xPd9%j<&o7y!*_z1 z;G#8+s?T%{A*J;4iDu=EtEOyG*mO*HVr){P!ie}2{_px zX7M<>a8KW(z_Ur%Ytg98luxR*HtGZv_HE}-OC+Fkkq$=wA*Upd#`v>;IK1AjkrRKK z*En2tHBqChx8zydXZ{ZXExB4Hiv+=n6Bs$i(XWnX*D4M^lsU{$s)T%TX+SHhZ%+Td}hi^Edb;=YrY{%h#!Is@5I{#L)iF94TO1O$%Cx3@u#nSI(T}onP=PoX|2WePB=OPSK9%Fd8^mrPd zMlU4%9pbTmx$bPIvMMh6BoU>aFidnW`%KO>sXTkP%|?%Lif90jQlL@MU-9*|?-;`a zy2<_GlJa*(MG@uR1FSmr1CyGXj-F!-_~>|X6I!D(cuvk6#U=HzFI(59c7u!jMO9=) zvn?l!FR!d|`bv3~AH9{;RB_T^(n{vDNpH1jwESF-d%cYNGMxMP ze1EqOT;9l36q{5EQrjqU7rMP_4;uht6BQ#rF9gTFL?Wo4s)=Z2_vrOA6nxof}xd48)&)~8)?(|6$bV1xWxMbmEo3Dr5 z89avj8VlZe=NXy&^JjcKVyqe!iJciEIz@6u@sK2q}khzBn3b~~}{G{Ny z?+{mKwD`Z4B*?lZzz!tm{Lps8n6#SS2zW#L!tRiv7lv8jTUWH;Gr802SQeXhT`0KC zgYc`e#YCYB&6aYJs^UjQTHFB9iP|!%(;WC4Cwy7$=e z<{l>7!j=?PoV?v!kw?3Y`>Ru5;Ebiye{x9Isf5_ChRNCK5t%&18B?Ty8`+!L1{;Hh zf!hMA9T7^y3M|C$aob4&CyQpqx~UR}eZkl6l=DiWXII|ZB=QLH!U!9V?Yi5nr@HCW zPyt46dx_YO#cfU5c>=rGEqw$|V`gBf2ZYS;=NFh_;D!gmvHTy{}Rxz?WiI*#kET!NhMRznU}XYY&YGx^{je` zL`m|lI*@Mqj*K~4m_H_V-^rev#k$w;-nqBHyL&O#JSz0c4XBe92E&UtHJlbToz(y@ zM@y#~;6YGpk#|jMQ3e1Itx@GZ0llLArJh~aFdn}TOuItzIsAD2hac6D>;f^Ne6bt{ z0Jp}RD;)&%fpSs56CV0-hC0-nLrFN23&)216yfO6uQ}nt(Ng9gFM>Wi-qJ=DvoSt^ zVd=P7OshHMy;yX=G{RGT?2^h89|I!3d!j#Onx%w&@lp;!F(rfTqikP&Rxr=_?u2>M#$F%M0HsfsBsCE1Ub;RqzGs=gk{HN;%HkL|jXC_*P_dW|?* z8}_-O0>f}BrgznsL{*Sz2}PbvrhozcT}2ohAIW#P?>b2MB`jZ-Pghg_pZLaj&#V0< z()xI*wRbAGf4Kpl{k%f0>>NULW_Vz;`%}a{W^KDWW>arOgGMx1g1{rA#9Mv)U2OYm zg3)>B=LLddej>-WdbfmP%9tV*vYMBtw3?ckaT8gSUel)_-xq1QD?3fvB=Ks2>+I-ZjzKKWj*M|V$8?Rb2jt`vvkeSwlY- zp7+iUM4nLa5a>VrG}mBb1J!svc_TZeNh^vLQy1Eo7m;4h$z*;}I|fuL&7i)GJ)5(? z>fRm&7FxEB1?mab+RfR~@}Sx7<6UvJdu zcU)^6dLg~BnATe&ZbF{`Ij-LCS69e_>Cn~7V_hZgZ;}#O@s8eRk|6?d@7yOq52}?B z^NS7pf{%-ayq0+9G(nF{^P}H-=Y|W8e7az-I1Dy=I|9N)gpI8GOwYB? z;}Ui%6q7c|j$}7R`Ae9)5b_h(r(~2XYBNd>vsy_|yw`q85h0tBZX4q2{j&YxqVSN`6hi)?v-R2; zenn_Wb6dvAWy?^+OZ73NK7j=Kg4Mc8j!;16rR(M@B)=6>u zdZtii$b+X5B%ZPB;dQu}Ivfi)U{PNgT-V|4<*+Gwu#-o`t+2{S^^UVjQtUsH6hom{ zF}2@R0i3;@qA22V!{Lg4LOd<)iG=F8;|^wx(oW_@FUEDXdL&s;QN)b|{`D`O?DA!( zDY2&>ol3Vs2g>!wF?<-;&}(74Q0ZcOhRW<}1D|WB5D3YYNO6fk37J%h4lCZC=ts6I z?|g5Ccb7kbrhg@o%g$$9Q0X#j=F!LjpzIBH-^Q#KSV}Gc%KHe}itjtFOdbT}6K+6x zalVXtN7*txpfDHN32<=3oDhV%&)}~t=E$3~&_CXnmNKrmYyQk_{dWG57Or_Xa;2Ep zyl=rT5D?`r6A=_LLkbPY#!s6eFhQ6e#%IV9f_DqXt@|oe^^e zK8*RFyWUB;F?H3c=%(=$rEWr$$M9_zHXpT&LEq2Z!nE1jGoGD#r*dxGpJtr!q$|^D zus>IkRu}+Mm-LigZ$l0S8F$Zun+pHL%E*Yj9{T>|ZdfOH5}>{=VaS8#rG@ktqDvv; zml=EW(`E1XAq@`DbPD$7J$mc0X`_sL8J?Vj3+}dgX}c@7d4IxVyu@KM&j^~#NAEX=z+t1q> z&uch2Ii6|}%da@lE(|9%!t1Lj!?R>rPG@H_#l1*M!!12pE4aU{%{vS~AZ9fj{CRx`e_e2_`()a zo^gKB`qP%^tuW9U;YdQQ4q-}6+0I=K-*f{iWg*O_)rVACxl9c^bAU$0cNj3_;ALv@ zEJvQsE5EQMSuXIOmoUV{(N8>BU7y!vUZS55Z;A!>X<4lWonAh3Y3$M`EwpYwsS)0O zmo8w|Jr`jp9*g?8%`h&Zg|J7tTl94H@N-D&X-tRdPlj^e|Y=>Kt#o8%8A6G+T9a7N4fq zsV?OwN*yGES8bt|<%1~eIPaVY6P;yFqrfhOs<#0Bs;d4D(SUUKRJ_enIaAJ%md&I2 z_rp1TIn3Vxj#oOmZpW$SmUEU6sXD<=;&QN?IM)qfj%45>EsT8<-+tC>G*$(Jd1F!O zWKfZju1H6kVYLe^(n{%4E^;4h;|VNfTh*yl!eZShlfDdxHyXaczPyetgiDsJ z=ljYY)i7y6`pqGSZ<%v#u)NdAIoIh%4zS;K|^f(VoLAaybX!x z!v+^yy(92WmOw7T>cK(mH1tymfb<>v%l5CJ8v6aQRvxXGFql^g3)T03x+)(LkJyCE z=eArC%bdGf?jH_gFAcZG9f%aw%T<^rF(t4VR8T3Yq+MMR3W|zaa1-iMh8O{@pAz)) z)tnfDl^vXzKAF(dU~Ai@kLfE=kw;k@Zu~(zu_VmE%G`tc2|X#N>n{hn5`A==(Ll9I zl~)4J9B*gevf>=XmWHqHq?Wq@Tg(z0K`A6v&57{xhaikQx-+$G!Rg(XXp!WLY&(f6 zCY)G@(~zn>eyJh{^{I1@DmyY zlXnhVK0XohlyBF!UJ>%I&>+5kV7MT~XF8-S_@>CKoH}lpUM*5(LpI)Jo$$Lr%lm>YF=uXODocL@y6-mX~*!)kz0Z_czj_f;dxrOt=8CVFzBCfEF&$} z&JzbCk2^vZIFwq=Y)U^4dp$OijPwKCoga0FW5cBp5jm+0=iOq5GE^41338vb*{xAo z8zQTk3Kw@OEp8rPJ7p>^-G2E_RfFjy{ZHGXUycFwQ*{}lL@aBM+Q}UYN{)cVt> zTW?J*x#h%=B^Q_k7%DTD05`L$$KYC z!&H2?7ZUjA9*>rJ!{r%bFz;F%E0-0p5{QZS-)*+?z{{3Bfi!M+JEMKY<^ca0%m4iE pcGjLiz#0E%nE&TC?daAKFLLqZ^V59b|K6a;zEzYgfAi7*e*s-Pi_ic7 literal 0 HcmV?d00001 diff --git a/platform/organization-settings.mdx b/platform/organization-settings.mdx index 01d31f3..c2d3da4 100644 --- a/platform/organization-settings.mdx +++ b/platform/organization-settings.mdx @@ -1,6 +1,6 @@ --- title: "Organization settings" -description: "Configure scan filters, the check gate, and SLA thresholds for your organization." +description: "Configure scan filters, the check gate, code review comments, and SLA thresholds for your organization." --- Organization settings apply to every repository unless a repository's `.hacktron/config.yaml` overrides them. Only organization admins and owners can change these settings. @@ -60,6 +60,28 @@ Set an org-wide severity threshold that fails a PR or MR check when a finding me See [Fail the check on findings](/code-review/config#fail-the-check-on-findings) for the full severity table and per-repository overrides. +## Code review comments + +Choose whether Hacktron posts scan results as comments on your pull requests and merge requests. This setting applies to every repository in your organization and is on by default. + +To change it, go to **Settings → Code review comments**. Only organization admins can change this setting. + +Code review comments settings card + +When comments are on, Hacktron posts findings and scan summaries directly to your pull requests and merge requests. + +When comments are off: + +- Scans still run as normal. +- Check statuses still update and can still block a merge. +- Findings remain available in Hacktron and connected tools such as Slack, Jira, and Linear. +- Hacktron does not post findings, summaries, or other comments to the pull request or merge request. + +Turning comments off does not remove comments that Hacktron has already posted. + ## SLA thresholds Set the resolution window and minimum compliance target for each severity.