Automatic push scans

How Foo Guard runs repository scans on push events.

Push scans run when:

  • the repository is enabled
  • .agentguard.yml is valid
  • the GitHub webhook is delivered successfully
  • Team entitlement is active

Push scans analyze the commit SHA from the event and store safe aggregated results for scan history and posture tracking.

Related pages