Skip to main content

​
Overview

Scanner settings control how ZeroPath scans your repositories — which tools run, how findings are filtered, how PRs are handled, and when scheduled scans execute. Settings follow a cascading inheritance model.

​
Settings Inheritance

Settings are applied in a three-level cascade: 
Organization (lowest priority)
    ↓
Tag (medium priority)
    ↓
Repository (highest priority)
  • Organization settings apply to all repositories as the default baseline.
  • Tag settings override organization defaults for repositories with that tag. Tags have a priority order — higher priority tags override lower ones.
  • Repository settings override everything for a specific repository.
Only explicitly set values override — unset fields fall through to the next level.

​
Scan Module Toggles

Each scanning module can be enabled or disabled independently for full scans and PR scans:
ModuleWhat It Scans
SASTStatic code analysis across all supported languages
SCADependency vulnerability scanning
IaCInfrastructure-as-code misconfiguration detection
SecretsHardcoded credentials and API keys
EOLEnd-of-life / unsupported dependency detection

​
Key Settings

​
Full Scan Settings

SettingDefaultDescription
Confidence filterStrictThreshold for including findings: Strict (fewer, higher confidence), Balanced, or Permissive (more findings)
Auto-patchingOffAutomatically generate patches for qualifying findings
Auto-PR creationOffAutomatically open PRs for generated patches
Patch threshold80Minimum score (0–100) for auto-patching
PR threshold80Minimum score for auto-PR creation
Custom rules onlyOffDisable built-in scanning; only evaluate custom rules

​
PR Scan Settings

SettingDefaultDescription
PR scanning enabledOffMaster toggle for PR scanning
Inline review commentsOnPost inline comments on affected diff lines
PR summary commentOnPost a summary comment on the PR
Check failure threshold75Score at which the VCS check is marked as failing
Result inclusion threshold0Minimum score for a finding to appear in PR feedback
Scan timeout10 minMaximum time before the scan times out
Auto-patchingOnGenerate fix suggestions for PR scan findings
Confidence filterStrictSame as full scan, applied to PR scans
Scan draft MRsOffWhether to scan GitLab draft merge requests
Scan bot PRsOffWhether to scan PRs opened by automation

​
PR Templates

Customize the appearance of auto-generated fix PRs:
TemplateDescription
PR title templateCustom format for generated PR titles
PR description templateCustom format for PR descriptions
Branch name formatCustom format for fix branch names
Commit message formatCustom format for fix commit messages

​
Scan Scheduling

Configure recurring scans using cron expressions:
  1. Navigate to your repository’s scanner settings.
  2. Under Scan Schedule, enter a cron expression (e.g., 0 2 * * 1 for every Monday at 2 AM).
  3. Optionally specify a target branch (defaults to the repository’s default branch).
The scheduler only creates new work when the branch’s head commit has changed since the last scan, avoiding redundant processing.

​
Scan Scope Controls

​
Directory Partitions (Monorepo Support)

For monorepos, configure directory partitions to scan specific sub-directories as independent applications:
  • Each partition is analyzed separately with its own application discovery.
  • PR scans route to the correct partition based on changed files.

​
Path Whitelist / Blacklist

Use glob patterns to focus or exclude specific paths from scanning:
  • Whitelist patterns — only scan files matching these patterns.
  • Blacklist patterns — exclude files matching these patterns.

​
Configuring Settings

​
From the Dashboard

  1. Navigate to Scanner in the ZeroPath dashboard.
  2. Select the Organization, Tag, or Repository level.
  3. Modify settings as needed.
  4. Changes take effect on the next scan.

​
From the API

Scanner settings can be read and updated via the v2 API: 
# Get settings for a repository
curl -X POST https://zeropath.com/api/v2/scannerSettings/get \
  -H "Content-Type: application/json" \
  -H "X-ZeroPath-API-Token-Id: your-token-id" \
  -H "X-ZeroPath-API-Token-Secret: your-token-secret" \
  -d '{"organizationId": "your-org-id", "repositoryId": "your-repo-id"}'