Skip to content

docs(code-review): clarify bot PR trust #65

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
zeyu2001 merged 3 commits into from
Sep 5, 2026
Merged

docs(code-review): clarify bot PR trust #65

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
51d9c95
docs(code-review): clarify bot trust gates
zeyu2001 Sep 5, 2026
f8fb287
docs(code-review): distinguish Bitbucket trust rules
zeyu2001 Sep 5, 2026
e03ecd3
docs(code-review): simplify bot trust guidance
zeyu2001 Sep 5, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
13 changes: 6 additions & 7 deletions code-review/config.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -74,15 +74,14 @@ Every key is optional. An empty or absent `config.yaml` doesn't disable filterin

## Exclude scans

The `exclude` block tells Hacktron not to scan a pull or merge request. A match records a **skipped** check and uses no developer seat. On GitHub, excluded bot PRs do not receive a skip comment.
The `exclude` block tells Hacktron not to scan a pull or merge request. A match records a **skipped** check and uses no developer seat.

<Note>
GitHub bot PRs are reviewed automatically only when the source branch belongs
to the same repository. Bot PRs from forks and PRs from outside human
contributors are not scanned automatically. GitLab and Bitbucket bot or
service accounts follow the normal coverage, filter, and seat rules. An
eligible bot author can take a Code Review seat when auto-assignment is on.
Add its username to `exclude.authors` to skip its future PRs or MRs.
Hacktron automatically reviews bot-authored changes only when the provider
identifies the bot as trusted for the target repository. Untrusted bots and
outside contributors are not auto-scanned. Eligible bots follow the same
filters and seat rules as other authors. Add a bot's username to
`exclude.authors` to skip its future changes.
</Note>

Rules are evaluated in this order, first match applies:
Expand Down