Product guide · English
Monitor repositories continuously
Set an organization scan schedule, override it where needed per repository, and use advisory alerts as a prompt to inspect fresh evidence.
Steps
- As an admin, open Workspace settings → Organization → Monitoring. Choose Off, Daily or Weekly for repositories following the default, and review the weekly summary setting.
- On a repository’s Settings tab, keep the organization default or select an explicit schedule. Scheduled audits target the default branch; an unchanged commit is skipped without consuming a scan.
- Review notifications when advisory reevaluation matches a newly changed advisory to a repository’s last successful inventory. Where monitoring is enabled and eligible, a new audit can confirm the observation.
- Check notification preferences and the summary recipients. Return to the actual audit or advisory evidence before deciding that a finding has appeared or been fixed.
Read the result
Advisory reevaluation can detect new information about previously observed packages without re-scanning the source. It does not discover code or dependencies added after that inventory. A schedule setting alone is not proof that the latest run completed.
Limits and availability
Scheduling and automation depend on feature access, quotas and worker availability. Free Quick Scan does not provide automatic monitoring. Weekly summaries are sent to eligible owners and admins with verified addresses; delivery is not a substitute for checking failed or skipped runs.
This guide describes the implemented workflow. The features available in your workspace depend on account capabilities and configuration; advanced workflows are not all included in Free Quick Scan. Check the available controls and the evidence returned by each run.