Rules Overview

Rules define what Dam Secure looks for when it reviews your code. Every pull request is checked against nine built-in vulnerability review lenses, covering areas such as access control, injection, authentication, and cryptography.

The Rules page in the app lists each lens with a short description of what it covers. The lenses are maintained by Dam Secure, so there is nothing to author or tune. They run automatically on every pull request once Pull Request Scans are turned on.

If Pull Request Scans are off, the Rules page shows the lenses as Not Running. Admins can turn scans on from the same page.

When a lens finds a problem, Dam Secure raises an Issue containing the affected code, an explanation, and a severity rating, so engineers can see exactly what failed and why.