PlatformResourcesSign inSign Up

Configure Code Repository Settings

Suggest Edits

Overview

After integrating your repositories, you can configure Bridgecrew's interactions with your integrations. This includes:

To access the Code Repository Settings page, go to Settings , then select Code Repository Settings.

1900

General

Adding a new Rule

📘

  • The first (default) rule is applied to all repositories, to view the add rule section, you need to deselect repositories.
  • You can configure multiple repositories in a single rule. However, repositories can only be placed in one rule at a time.

In order to create a new rule for a specific repository, you must remove the repository from its current rule first, then click Add rule and include the desired repositories.

1175

Saving a change

After making changes in any section select Save.

1175

Deleting a Rule

Hover over a rule and select the trash icon to delete it.
Note: Default rule can't be deleted.

1175

Exclude Files from Scan

After integrating code repositories, Bridgecrew Cloud scans all the files in the selected repositories.
You can set paths/files (comma separated) to be excluded from scans using regular expressions. Then select the repositories that you want to exclude the paths/files from.

Examples

If you enter test under Exclude Paths, the files in any path that include the word "test" will not be scanned.
To narrow an exclusion using a specific context such as /test/, but include paths such as _unitest, use \/test\/.

891

📘

Tips

Try this cheat sheet for help in writing regex.

Enable and Configure Code Reviews

When Code Reviews are enabled, Bridgecrew checks code changes for every new Pull Request in the selected repositories, displays errors, and offers an option to quickly fix or suppress them.

Code Review actions include:

  • Enabling/disabling code reviews
  • Selecting the repositories to scan
  • Setting a soft fail based on the returned severity level
  • Excluding specific policies from soft failing
886

Enable and Configure Pull Request Bot Comments

When Bridgecrew’s Pull Request bot is enabled in a Code Repository, it will add comments for errors detected in a PR’s code changes.

Pull Request Bot Comments actions include:

  • Enabling/disabling Pull Request Bot Comments
  • Selecting repositories
  • Adding Pull Request Bot Comments based on the returned severity level
  • Excluding specific policies from Pull Request Bot Comments
814

Enable and Configure Tagging Bots

When Bridgecrew’s Tagging Bot is enabled in a Code Repository, it will create pull requests when a new IaC is committed into the branch.

📘

Note

When enabled, the Tagging Bot will create unique resource tags in the IaC templates configured in your VCS. This enables traceability and detection of drifts between build time and run time resources.
For more information about Drift Detection see here.

Tagging Bot actions include:

  • Enabling/disabling Tagging Bot
  • Selecting repositories
  • Excluding specific policies from Pull Request Bot Comments
786

Updated over 1 year ago