Auto-scan on push

CodeStax can queue a scan when GitHub or Bitbucket Cloud reports a push to the repository’s tracked branch.

Prerequisites

1. Connect the repository and provider identity.
2. Install a valid GitHub or Bitbucket push webhook using the provider webhook guide.
3. Open Settings → General and enable Auto-scan on push.

GitLab.com merge-request webhooks trigger reviews, but GitLab push-to-scan is not implemented.

How dispatch works

For each supported push event, CodeStax:

1. verifies the provider signature;
2. claims a stable delivery identity so a redelivery cannot create duplicate work;
3. matches the event to exactly one connected repository;
4. checks the effective organization and repository policy;
5. confirms the pushed branch is the repository’s tracked branch; and
6. reserves scan quota and queues the scan.

If quota is exhausted, CodeStax records the skipped outcome and does not create unaccounted scan work.

Choose review coverage for feature branches

Push scans target the tracked branch. For feature-branch changes, configure provider-triggered review events under Reviews → Settings and see Set up PR reviews.

Disable push scans without disabling reviews

Open Settings → General, turn off Auto-scan on push, and save. Keep the provider webhook installed if you still want pull-request reviews. You can also remove only the push subscription from the provider’s webhook event list.