From 0edc44ceed50fcf600a8d0cee44edba6fce5479f Mon Sep 17 00:00:00 2001 From: alan-hacktron Date: Tue, 28 Jul 2026 11:56:06 +0800 Subject: [PATCH 1/2] docs: document glob matching for author scan filters exclude.authors/include.authors (and the org-wide equivalents) now match glob patterns like branches do, not just exact logins. --- code-review/config.mdx | 18 ++++++++++-------- platform/organization-settings.mdx | 2 +- 2 files changed, 11 insertions(+), 9 deletions(-) diff --git a/code-review/config.mdx b/code-review/config.mdx index 5180d6d..4b0d8fb 100644 --- a/code-review/config.mdx +++ b/code-review/config.mdx @@ -84,7 +84,7 @@ Rules are evaluated in this order, first match applies: | `exclude.labels` | the PR/MR carries one of these labels | case-insensitive exact match | | `exclude.keywords` | the PR/MR **title** contains one of these strings | case-insensitive substring | | `exclude.paths` | **every** changed file matches one of these patterns | case-insensitive glob | -| `exclude.authors` | the PR/MR was opened by one of these usernames | case-insensitive exact match | +| `exclude.authors` | the PR/MR was opened by an author matching one of these patterns | case-insensitive glob | | any key set to `[]` | clears the org-wide default for that key ([Configuration hierarchy](#configuration-hierarchy)) | - | @@ -107,6 +107,7 @@ exclude: - "**/*.md" authors: - "dependabot[bot]" # exclude all PRs opened by dependabot + - "*-bot" # glob: exclude any author ending in "-bot" ``` @@ -117,11 +118,11 @@ exclude: - `exclude.branches`, `exclude.paths`, and `include.branches` (and their - org-wide equivalents) accept glob patterns mixed with literals: `*`, `**`, - `?`, and `{(a, b)}` brace expansion. Matching is case-insensitive. `[`, `]`, - and a leading `!` are literal, not special syntax. Each category allows up to - 50 entries. + `exclude.branches`, `exclude.paths`, `exclude.authors`/`include.authors`, + and `include.branches` (and their org-wide equivalents) accept glob + patterns mixed with literals: `*`, `**`, `?`, and `{(a, b)}` brace + expansion. Matching is case-insensitive. `[`, `]`, and a leading `!` are + literal, not special syntax. Each category allows up to 50 entries. @@ -154,8 +155,9 @@ include: labels: - security-review # only scan PRs labelled "security-review" authors: - - alice # ...and were opened by Alice or Bob + - alice # ...and were opened by Alice, Bob, or a bot account - bob + - "*-bot" keywords: - "please review" # ...and title contains "please review" ``` @@ -164,7 +166,7 @@ include: | ------------------- | ---------------------------------------------------------------------------------------------- | | `include.branches` | the PR/MR targets one of these branches (case-insensitive glob) | | `include.labels` | the PR/MR carries at least one of these labels (case-insensitive exact match) | -| `include.authors` | the PR/MR was opened by one of these usernames (case-insensitive exact match) | +| `include.authors` | the PR/MR was opened by an author matching one of these patterns (case-insensitive glob) | | `include.keywords` | the PR/MR title contains one of these strings (case-insensitive substring) | | any key set to `[]` | clears the org-wide default for that key ([Configuration hierarchy](#configuration-hierarchy)) | diff --git a/platform/organization-settings.mdx b/platform/organization-settings.mdx index e959304..01d31f3 100644 --- a/platform/organization-settings.mdx +++ b/platform/organization-settings.mdx @@ -31,7 +31,7 @@ Choose which pull and merge requests Hacktron scans by default, across four cate | -------- | ------------------------------------------------- | | Branches | Glob pattern, case-insensitive (e.g. `release/*`) | | Labels | Exact name, case-insensitive | -| Authors | Exact username, case-insensitive | +| Authors | Glob pattern, case-insensitive (e.g. `*-bot`) | | Keywords | Substring in the PR/MR title, case-insensitive | From c358a08efa452cfad328a8b56699d99a192356e0 Mon Sep 17 00:00:00 2001 From: alan-hacktron Date: Tue, 28 Jul 2026 12:17:10 +0800 Subject: [PATCH 2/2] style: fix prettier formatting in config.mdx --- code-review/config.mdx | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/code-review/config.mdx b/code-review/config.mdx index 4b0d8fb..8a14300 100644 --- a/code-review/config.mdx +++ b/code-review/config.mdx @@ -107,7 +107,7 @@ exclude: - "**/*.md" authors: - "dependabot[bot]" # exclude all PRs opened by dependabot - - "*-bot" # glob: exclude any author ending in "-bot" + - "*-bot" # glob: exclude any author ending in "-bot" ``` @@ -118,11 +118,11 @@ exclude: - `exclude.branches`, `exclude.paths`, `exclude.authors`/`include.authors`, - and `include.branches` (and their org-wide equivalents) accept glob - patterns mixed with literals: `*`, `**`, `?`, and `{(a, b)}` brace - expansion. Matching is case-insensitive. `[`, `]`, and a leading `!` are - literal, not special syntax. Each category allows up to 50 entries. + `exclude.branches`, `exclude.paths`, `exclude.authors`/`include.authors`, and + `include.branches` (and their org-wide equivalents) accept glob patterns mixed + with literals: `*`, `**`, `?`, and `{(a, b)}` brace expansion. Matching is + case-insensitive. `[`, `]`, and a leading `!` are literal, not special syntax. + Each category allows up to 50 entries. @@ -166,7 +166,7 @@ include: | ------------------- | ---------------------------------------------------------------------------------------------- | | `include.branches` | the PR/MR targets one of these branches (case-insensitive glob) | | `include.labels` | the PR/MR carries at least one of these labels (case-insensitive exact match) | -| `include.authors` | the PR/MR was opened by an author matching one of these patterns (case-insensitive glob) | +| `include.authors` | the PR/MR was opened by an author matching one of these patterns (case-insensitive glob) | | `include.keywords` | the PR/MR title contains one of these strings (case-insensitive substring) | | any key set to `[]` | clears the org-wide default for that key ([Configuration hierarchy](#configuration-hierarchy)) |