diff --git a/code-review/config.mdx b/code-review/config.mdx index b7f9a0b..f831b36 100644 --- a/code-review/config.mdx +++ b/code-review/config.mdx @@ -74,15 +74,14 @@ Every key is optional. An empty or absent `config.yaml` doesn't disable filterin ## Exclude scans -The `exclude` block tells Hacktron not to scan a pull or merge request. A match records a **skipped** check and uses no developer seat. On GitHub, excluded bot PRs do not receive a skip comment. +The `exclude` block tells Hacktron not to scan a pull or merge request. A match records a **skipped** check and uses no developer seat. - GitHub bot PRs are reviewed automatically only when the source branch belongs - to the same repository. Bot PRs from forks and PRs from outside human - contributors are not scanned automatically. GitLab and Bitbucket bot or - service accounts follow the normal coverage, filter, and seat rules. An - eligible bot author can take a Code Review seat when auto-assignment is on. - Add its username to `exclude.authors` to skip its future PRs or MRs. + Hacktron automatically reviews bot-authored changes only when the provider + identifies the bot as trusted for the target repository. Untrusted bots and + outside contributors are not auto-scanned. Eligible bots follow the same + filters and seat rules as other authors. Add a bot's username to + `exclude.authors` to skip its future changes. Rules are evaluated in this order, first match applies: