SurfacesAvailable
Run a security pass from the pull request.
Comment on a pull request and Dex runs a security pass, reviews it, or fixes the finding. The results post back to the pull request. Repository settings behind a failing control, such as required reviews, are changed through the GitHub connection you grant, with a receipt in the app.
A finding on a pull request.
Example pull request with demo data.
- Comment
You ask Dex for a security pass on a change to the invite handler.
- Dex finding
The handler skips the workspace ownership check, so any signed-in user could invite into another workspace.
- Dex fix
Dex pushes a commit that adds the check and a test for it, and runs your checks on the branch.
- Repository setting
Separately, required reviews on main were off. Dex changed the setting through the GitHub connection and the receipt is in the app.
Review, fix, secure
Three commands from any PR comment. Results post right back to the pull request.
Code in the pull request, settings in the receipt
The pull request commands cover the code. Repository settings use the GitHub connection and keep their own read-back and evidence.
Your review standards
Memory your team has approved and skills it has saved apply to the next review.
