PR Security Reviews
Find risk while it is still a diff.
Keep security review next to the change, with source-bound findings and an explicit policy for incomplete results.
The source-review CLI and adapter candidates exist. Managed GitHub installation and hosted reporting are not yet available.
Open workspaceSelected repositories and immutable revisions
Report-only reviews before enforcement
GitHub Actions, CircleCI and generic CI
Scope, evidence and next action
- Preview the additive setup change
- Review the exact base and head revision
- Triage findings before enabling a merge policy