Foo GuardBeta
Menu

GitHub Checks

Foo Guard Security Check runs with policy-driven pass and fail conclusions.

Overview

Team workspaces publish a GitHub Check named Foo Guard Security on enabled repositories. The check conclusion reflects policy evaluation:

| Conclusion | Meaning |

|------------|---------|

| **Success** | Scan completed and policy passed |

| **Failure** | Scan completed but policy failed (policy violation) |

| **Neutral** | No supported configuration found, or an operational/config error |

Policy failures are enforcement events — the scan ran successfully but findings or grade did not meet your thresholds.

When checks run

Foo Guard publishes checks on:

  • Pull request events (opened, synchronize, reopened) for supported configuration changes
  • Default-branch push events

See Pull request scanning and Push scans.

Check summary

The check summary includes:

  • Grade and score
  • Policy pass/fail status
  • Effective threshold (failOn, optional minGrade) and source (organization, repository, or default)
  • Top findings by severity
  • Baseline regression status when applicable
  • Link to the scan in Foo Guard

Example failed check

Foo Guard Security          ✗ Failed

Grade: D · Score: 62 · Policy: failed
Effective threshold: high (organization policy)
Minimum grade: B (repository policy)

Policy evaluation

Effective policy merges:

1. Organization policy (Team settings — mandatory floor) 2. Repository policy (.agentguard.yml — repository policy-as-code) 3. Default (failOn: high when nothing else is set)

The strictest threshold wins. Organization policy cannot be weakened by repository settings.

Branch protection

To block merges when policy fails, require the Foo Guard Security check in GitHub branch protection or rulesets.

See Branch protection.

Foo Guard does not modify branch protection settings automatically.

Fork pull requests

Fork pull requests whose head repository is outside the installation scope are skipped because installation tokens cannot safely access fork-owned content.

Related

Related pages