Pull request reviews
What V12 posts on a GitHub pull request after reviewing it, the permission it needs, and what the run page's Review line means.
Runs started by an Autopilot New pull requests rule or an @v12sec comment post on the pull request. See Autopilot.
What V12 posts
- A summary comment, while the run works and once it finishes. It lists the run's findings.
- One pull request review, at most, once the findings reach the inbox:
- an inline comment on the changed line of each critical, high or medium finding it can place there, up to 20;
- a link to the summary comment, which lists the rest.
If no finding can be placed on a changed line, V12 posts no review. V12 never posts a second review for the same run.
Permission
V12 posts on a pull request only when the V12 GitHub App has Pull requests: Read & write on its repository. Without it, V12 posts neither the summary comment nor the review: GitHub refuses a pull request comment without that permission.
The Review line
The run page shows Review: where V12's review on the pull request stands.
| It reads | Meaning |
|---|---|
| "posting…" | V12 is posting the review. |
| "n comments on PR #n" | The review is posted; the line links to it. |
| "nothing to comment inline" | No finding could be placed on a changed line, so V12 posted no review. |
| "The V12 GitHub App needs Pull requests: Read & write on this repository" | The app lacks the permission. Manage access opens the GitHub section of Settings → Repositories. |
| "not posted: PR is not postable" | V12 couldn't read the pull request or get access to post on it. |
| "GitHub rejected it" | GitHub refused the review. |
| "Review posting unavailable" | V12 couldn't confirm whether GitHub created the review; check the pull request. V12 doesn't try again. |