Incremental audits
Re-audit only new commits while re-verifying active findings.
Loading documentation…
Powered by heyo
With incremental: true (the default), Heyo stores compact machine state in a
completed GitHub Check. On a later push to the same pull request, it finds a
compatible prior state, audits the new delta, re-verifies every active prior
finding, and deduplicates the combined result.
Heyo falls back to a full audit when it cannot safely reuse state, including when the base changed, the previous head is not an ancestor, configuration or policy changed, state is invalid, incremental mode is disabled, or a prior run was unreliable.
report: comment and report: none produce no Check, so they do not retain
incremental state.
Before Pi starts, Heyo enforces these limits:
max-pr-commits for a full audit, default 100.max-new-commits for an incremental audit, default 20.A limit breach publishes a neutral result and does not advance the audit
state. Set either value to a positive integer or unlimited.