Pull request reviews
What V12 posts on a GitHub pull request after reviewing it, the permission it needs, and what the run page's Review line means.
Runs started by an Autopilot New pull requests rule or an @v12sec comment post on the pull request. See Autopilot.
What V12 posts
- A summary comment, while the run works and once it finishes. It lists the run's findings.
- One pull request review, at most, once the findings reach the inbox:
- an inline comment on the changed line of each critical, high or medium finding it can place there, up to 20;
- a link to the summary comment, which lists the rest.
If no finding can be placed on a changed line, V12 posts no review. V12 never posts a second review for the same run.
Permission
The review needs the V12 GitHub App to have Pull requests: Read & write on the repository. Without it, V12 posts the summary comment only.
The Review line
The run page shows Review: where V12's review on the pull request stands.
| It reads | Meaning |
|---|---|
| "posting…" | V12 is posting the review. |
| "n comments on PR #n" | The review is posted; the line links to it. |
| "nothing to comment inline" | No finding could be placed on a changed line, so V12 posted no review. |
| "The V12 GitHub App needs Pull requests: Read & write on this repository" | The app lacks the permission. Manage access opens the GitHub section of Settings → Repositories. |
| "not posted: PR is not postable" | V12 couldn't read the pull request or get access to post on it. |
| "GitHub rejected it" | GitHub refused the review. |
| "Review posting unavailable" | V12 couldn't confirm whether GitHub created the review; check the pull request. V12 doesn't try again. |