Your First Day with CodeStax
This guide walks you through everything you need to do on your first day - from creating your account to reviewing real scan results. By the end, you’ll have a fully configured workspace with automated security scanning.
The 5-Minute Setup
What Gets Scanned
Smart and Deep scans feed these analysis areas. Exact depth varies by scan mode, repository contents, organization policy, and configured services:
Configured pull-request reviews are a separate workflow that analyzes provider diffs and publishes supported summaries, annotations, and gate signals.
Understanding Your Dashboard
After your first scan completes, your dashboard shows:
| Section | What It Tells You |
|---|---|
| Security Score | Overall security posture (0-100). Aim for 80+ |
| Severity Breakdown | Count of Critical, High, Medium, and Low findings |
| Scan History | Timeline of all scans with status and duration |
| Top Issues | Most impactful findings sorted by severity and exploitability |
| Code Quality | Quality metrics including complexity, dead code, and duplication |
Recommended Next Steps
Once you’re comfortable with the basics:
- Set up quality gates - Define minimum standards for your codebase
- Configure PR reviews - Get automated feedback on configured pull requests
- Invite your team - Add developers, leads, and stakeholders
- Configure quality tools - fine-tune complexity, dead-code, and duplication thresholds
- Set up notifications - Get alerted on critical findings