# Checks

The Checks section lists all StepSecurity check runs across your organization. From here, you can see why a check failed, review security findings, and approve checks when appropriate.

<figure><img src="/files/WjDTfbtvMdktHkfnxvEY" alt=""><figcaption></figcaption></figure>

You can refine the list of checks by applying filters:

* Filter by Conclusion (Success or Failure)
* Filter by Repository
* Filter by Status(Approved or Pending)
* Filter by Time Range

## Approving a Failed StepSecurity GitHub Check

This guide explains how to approve a failed StepSecurity GitHub check when an alert is triggered due to unexpected network calls from CI/CD runners.

There are two ways to do this:

1. From the GitHub Pull Request (PR)
2. From the StepSecurity dashboard<br>

### Option 1: Approve From the PR

#### **Step 1: Navigate to the Pull Request**

* Open the Pull Request (PR) that contains the failed StepSecurity check.

<figure><img src="https://ajeuwbhvhr.cloudimg.io/colony-recorder.s3.amazonaws.com/files/2025-03-04/fbf5f4e8-0dd0-443c-b850-7ee2edb74a94/user_cropped_screenshot.jpeg?tl_px=127,89&#x26;br_px=2880,1628&#x26;force_format=jpeg&#x26;q=100&#x26;width=1120.0" alt="StepSecurity Harden-Runner Check failing in a PR"><figcaption><p>StepSecurity Harden-Runner Check failing in a PR</p></figcaption></figure>

#### **Step 2: Click on the Failed Check**

* Locate the StepSecurity Harden-Runner check under the failed checks section.
* Click on the failed check to view more details.

<figure><img src="https://ajeuwbhvhr.cloudimg.io/colony-recorder.s3.amazonaws.com/files/2025-03-04/4088bbae-95c9-4ccd-af9f-3d1a010ce6d0/ascreenshot.jpeg?tl_px=0,398&#x26;br_px=1965,1497&#x26;force_format=jpeg&#x26;q=100&#x26;width=1120.0&#x26;wat=1&#x26;wat_opacity=1&#x26;wat_gravity=northwest&#x26;wat_url=https://colony-recorder.s3.amazonaws.com/images/watermarks/8B5CF6_standard.png&#x26;wat_pad=434,277" alt="StepSecurity Harden-Runner Check failing in a PR"><figcaption><p>StepSecurity Harden-Runner Check failing in a PR</p></figcaption></figure>

#### **Step 3: Review the Failure Details and Approve**

* The check failure page will display details about unexpected network calls detected from the Harden-Runner.
* Identify the endpoint and the workflow that triggered the alert.
* If you want to approve the check run, click the approval link provided in the failure details.

<figure><img src="https://ajeuwbhvhr.cloudimg.io/colony-recorder.s3.amazonaws.com/files/2025-03-04/b2a97b09-33d3-44e4-b80c-df1ae7323346/ascreenshot.jpeg?tl_px=145,335&#x26;br_px=2111,1433&#x26;force_format=jpeg&#x26;q=100&#x26;width=1120.0&#x26;wat=1&#x26;wat_opacity=1&#x26;wat_gravity=northwest&#x26;wat_url=https://colony-recorder.s3.amazonaws.com/images/watermarks/8B5CF6_standard.png&#x26;wat_pad=519,340" alt="StepSecurity Harden-Runner failed check"><figcaption><p>StepSecurity Harden-Runner failed check</p></figcaption></figure>

#### **Step 4: Approve the Check Run**

* On the approval page, review the detected outbound network calls.
* Click “Approve” to confirm that you are aware of the anomalous call.

<figure><img src="https://ajeuwbhvhr.cloudimg.io/colony-recorder.s3.amazonaws.com/files/2025-03-04/4700f1d0-df46-4045-9eff-f40d2b174554/user_cropped_screenshot.jpeg?tl_px=255,0&#x26;br_px=3008,1538&#x26;force_format=jpeg&#x26;q=100&#x26;width=1120.0&#x26;wat=1&#x26;wat_opacity=1&#x26;wat_gravity=northwest&#x26;wat_url=https://colony-recorder.s3.amazonaws.com/images/watermarks/8B5CF6_standard.png&#x26;wat_pad=1042,174" alt="StepSecurity Insights page"><figcaption><p>StepSecurity Insights page</p></figcaption></figure>

#### **Step 5: Verify Approval Status**

* Return to the check run status tab in GitHub.
* You will now see that the check has been approved by your GitHub username.

<figure><img src="https://ajeuwbhvhr.cloudimg.io/colony-recorder.s3.amazonaws.com/files/2025-03-04/52bf0642-3a0a-41a2-8545-88f36c3ddb4f/user_cropped_screenshot.jpeg?tl_px=1042,328&#x26;br_px=3008,1427&#x26;force_format=jpeg&#x26;q=100&#x26;width=1120.0&#x26;wat=1&#x26;wat_opacity=1&#x26;wat_gravity=northwest&#x26;wat_url=https://colony-recorder.s3.amazonaws.com/images/watermarks/8B5CF6_standard.png&#x26;wat_pad=819,277" alt="StepSecurity Harden-Runner check"><figcaption><p>StepSecurity Harden-Runner check</p></figcaption></figure>

#### **Step 6: Confirm the StepSecurity Check Passed**

* After approval, the StepSecurity check should now be successful.
* The PR is now ready for merging.

<figure><img src="https://ajeuwbhvhr.cloudimg.io/colony-recorder.s3.amazonaws.com/files/2025-03-04/ecc58c30-b81a-44f3-88a8-ee4e76ee9f45/ascreenshot.jpeg?tl_px=201,619&#x26;br_px=2167,1718&#x26;force_format=jpeg&#x26;q=100&#x26;width=1120.0&#x26;wat=1&#x26;wat_opacity=1&#x26;wat_gravity=northwest&#x26;wat_url=https://colony-recorder.s3.amazonaws.com/images/watermarks/8B5CF6_standard.png&#x26;wat_pad=963,272" alt="StepSecurity Harden-Runner check successful"><figcaption><p>StepSecurity Harden-Runner check successful</p></figcaption></figure>

### Option 2: Approve from the StepSecurity Dashboard

#### Step 1: Navigate to the Dashboard

* Open the StepSecurity dashboard.

<figure><img src="/files/FmzIsr2b5Ys27Jbv6W1H" alt=""><figcaption></figcaption></figure>

#### Step 2: Filter Failed Check Runs

* Use the filters to show only Failed check runs.

<figure><img src="/files/xgYFDqxrvaFbbRIQteUs" alt=""><figcaption></figcaption></figure>

#### Step 3: Open the Failed Run

* Locate the failed check run that is pending approval.
* Expand it by clicking the > arrow.

<figure><img src="/files/e20YFYcDtuVhvDOTrbwG" alt=""><figcaption></figcaption></figure>

#### Step 4: Review and Approve

* Review details of the detected outbound network calls.
* If legitimate, click Approve to allow the run.

<figure><img src="/files/Qbv9SR8wsKnpoWIXRdhF" alt=""><figcaption></figcaption></figure>

#### Step 5: Verify and Confirm

* The status will update to Approved in the dashboard.
* The corresponding GitHub check will re-run and pass.

<figure><img src="/files/t20JoRMm8zV5iPRwbQW7" alt=""><figcaption></figcaption></figure>

### Re-running StepSecurity Checks from a Pull Request

Customers can re-run StepSecurity checks directly from a Pull Request (PR) by leaving a comment.

To trigger a re-run, comment the following in the PR thread:

```
@stepsecurity-app checks re-run
```

Once the comment is added, the StepSecurity app will automatically re-run all associated checks for that PR. This is useful when you’ve fixed workflow issues or adjusted configurations and want to validate the updated behavior without creating a new commit.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.stepsecurity.io/github/github-checks/checks.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
