diff --git a/docs/cli/features/code-review.mdx b/docs/cli/features/code-review.mdx index a7879313..31224239 100644 --- a/docs/cli/features/code-review.mdx +++ b/docs/cli/features/code-review.mdx @@ -254,7 +254,7 @@ Plus an **overall assessment**: For automated PR reviews, use the [Automated Code Review](/guides/droid-exec/code-review) workflow. It supports: - **Review depth** (`deep` or `shallow`) to control thoroughness and cost -- **Security review** with STRIDE-based vulnerability scanning, configurable severity thresholds, and PR blocking on critical findings +- **Security review** with STRIDE-based vulnerability scanning and configurable severity thresholds - **On-demand security scans** via `@droid security` comments on PRs, or `@droid security --full` for a full-repo scan - **Scheduled full-repo scans** via cron-based workflow triggers diff --git a/docs/enterprise/github-integration-security.mdx b/docs/enterprise/github-integration-security.mdx index 273dbe26..a709f941 100644 --- a/docs/enterprise/github-integration-security.mdx +++ b/docs/enterprise/github-integration-security.mdx @@ -124,7 +124,7 @@ Control who can trigger the action: For enhanced security, you can restrict network access during Droid execution: ```yaml -- uses: Factory-AI/droid-action@v1 +- uses: Factory-AI/droid-action@main with: factory_api_key: ${{ secrets.FACTORY_API_KEY }} experimental_allowed_domains: | diff --git a/docs/guides/droid-exec/code-review.mdx b/docs/guides/droid-exec/code-review.mdx index 24968421..39737e32 100644 --- a/docs/guides/droid-exec/code-review.mdx +++ b/docs/guides/droid-exec/code-review.mdx @@ -97,9 +97,6 @@ The `--full` scan creates a new branch (`droid/security-report-{date}`), generat | `automatic_security_review` | `false` | Run security review automatically on every PR | | `security_model` | (inherits from `review_model`) | Model for security analysis | | `security_severity_threshold` | `medium` | Minimum severity to report: `critical`, `high`, `medium`, `low` | -| `security_block_on_critical` | `true` | Submit `REQUEST_CHANGES` on critical findings | -| `security_block_on_high` | `false` | Submit `REQUEST_CHANGES` on high findings | -| `security_notify_team` | (empty) | GitHub team to @mention on critical findings (e.g., `@org/security-team`) | ### Scheduled security scans @@ -115,7 +112,7 @@ jobs: security-scan: runs-on: ubuntu-latest steps: - - uses: Factory-AI/droid-action@v3 + - uses: Factory-AI/droid-action@main with: security_scan_schedule: true security_scan_days: 7 # Scan commits from the last 7 days @@ -214,9 +211,6 @@ Guidelines: | `automatic_security_review` | `false` | Run security review on every PR | | `security_model` | (from `review_model`) | Override model for security review | | `security_severity_threshold` | `medium` | Minimum severity to report | -| `security_block_on_critical` | `true` | Block PRs on critical findings | -| `security_block_on_high` | `false` | Block PRs on high findings | -| `security_notify_team` | (empty) | Team to @mention on critical findings | | `security_scan_schedule` | `false` | Enable scheduled full-repo scans | | `security_scan_days` | `7` | Days of commits to scan | diff --git a/docs/integrations/github-app.mdx b/docs/integrations/github-app.mdx index 581fca8e..c066fddd 100644 --- a/docs/integrations/github-app.mdx +++ b/docs/integrations/github-app.mdx @@ -248,7 +248,7 @@ jobs: fetch-depth: 1 - name: Run Droid Auto Review - uses: Factory-AI/droid-action@v3 + uses: Factory-AI/droid-action@main with: factory_api_key: ${{ secrets.FACTORY_API_KEY }} automatic_review: true diff --git a/docs/jp/cli/features/code-review.mdx b/docs/jp/cli/features/code-review.mdx index 2ad17dae..9311dfaa 100644 --- a/docs/jp/cli/features/code-review.mdx +++ b/docs/jp/cli/features/code-review.mdx @@ -243,7 +243,7 @@ AIは以下の基準をすべて満たす場合のみ、問題をバグとして 自動 PR レビューには、[自動コードレビュー](/jp/guides/droid-exec/code-review)ワークフローを使用してください。以下をサポートしています: - **レビューの深度**(`deep`または`shallow`)で徹底性とコストを制御 -- **セキュリティレビュー**:STRIDE ベースの脆弱性スキャン、設定可能な重要度閾値、重大な発見時の PR ブロック機能付き +- **セキュリティレビュー**:STRIDE ベースの脆弱性スキャン、設定可能な重要度閾値 - **オンデマンドセキュリティスキャン**:PR での`@droid security`コメント、または`@droid security --full`でリポジトリ全体のスキャン - **スケジュール済み全体スキャン**:cron ベースのワークフロートリガー経由 diff --git a/docs/jp/enterprise/github-integration-security.mdx b/docs/jp/enterprise/github-integration-security.mdx index 161d063f..a4f08b89 100644 --- a/docs/jp/enterprise/github-integration-security.mdx +++ b/docs/jp/enterprise/github-integration-security.mdx @@ -124,7 +124,7 @@ permissions: セキュリティ強化のため、Droid実行中のネットワークアクセスを制限できます: ```yaml -- uses: Factory-AI/droid-action@v1 +- uses: Factory-AI/droid-action@main with: factory_api_key: ${{ secrets.FACTORY_API_KEY }} experimental_allowed_domains: | diff --git a/docs/jp/guides/droid-exec/code-review.mdx b/docs/jp/guides/droid-exec/code-review.mdx index 44951b53..96f0e879 100644 --- a/docs/jp/guides/droid-exec/code-review.mdx +++ b/docs/jp/guides/droid-exec/code-review.mdx @@ -87,9 +87,6 @@ with: | `automatic_security_review` | `false` | 全てのPRで自動的にセキュリティレビューを実行 | | `security_model` | (`review_model` から継承) | セキュリティ分析用のモデル | | `security_severity_threshold` | `medium` | レポートする最小重要度:`critical`、`high`、`medium`、`low` | -| `security_block_on_critical` | `true` | 重要な発見事項で `REQUEST_CHANGES` を送信 | -| `security_block_on_high` | `false` | 重大な発見事項で `REQUEST_CHANGES` を送信 | -| `security_notify_team` | (空) | 重要な発見事項で@メンションするGitHubチーム(例:`@org/security-team`) | ### スケジュール化されたセキュリティスキャン @@ -104,7 +101,7 @@ jobs: security-scan: runs-on: ubuntu-latest steps: - - uses: Factory-AI/droid-action@v3 + - uses: Factory-AI/droid-action@main with: security_scan_schedule: true security_scan_days: 7 # Scan commits from the last 7 days @@ -192,9 +189,6 @@ Guidelines: | `automatic_security_review` | `false` | すべてのPRでセキュリティレビューを実行 | | `security_model` | (`review_model`から) | セキュリティレビュー用のモデルをオーバーライド | | `security_severity_threshold` | `medium` | 報告する最小重要度 | -| `security_block_on_critical` | `true` | 重大な発見時にPRをブロック | -| `security_block_on_high` | `false` | 高い発見時にPRをブロック | -| `security_notify_team` | (空) | 重大な発見時に@mentionするチーム | | `security_scan_schedule` | `false` | スケジュールされた全リポジトリスキャンを有効化 | | `security_scan_days` | `7` | スキャンするコミットの日数 | diff --git a/docs/jp/integrations/github-app.mdx b/docs/jp/integrations/github-app.mdx index fc447d3b..d291bc93 100644 --- a/docs/jp/integrations/github-app.mdx +++ b/docs/jp/integrations/github-app.mdx @@ -248,7 +248,7 @@ jobs: fetch-depth: 1 - name: Run Droid Auto Review - uses: Factory-AI/droid-action@v3 + uses: Factory-AI/droid-action@main with: factory_api_key: ${{ secrets.FACTORY_API_KEY }} automatic_review: true