Settings
How pull requests are reviewed, when the check fails, and who hears about it.
Pull request reviews
The default for acme. Each repository can override it on the Repos page.
Review
Each push to an open pull request gets a review comment and a check run.
Merge check
Each review posts a GitHub check run. Choose the lowest severity that turns it red, so branch protection can block the merge.
Fail the check at
The check fails on high or critical findings. Recommended for most teams.
Sent to the address on your GitHub account. Nothing else, and never marketing.
New finding alerts
As soon as a critical or high finding is confirmed.
Weekly digest
Open findings, fixes and scan activity, every Monday morning.