Anatomy of a finding
Each finding tells you:- File and line — where the issue is in your code.
- Severity — how serious it is (
critical/high/medium/low), and whether it blocks, per your thresholds. - Message — what the issue is, in plain language.
- Remediation guidance — how to fix it.
Act on a finding
1
Read the message and guidance
The finding states the problem and a suggested fix. Start there.
2
Open the file at the reported line
Go to the file and line in the finding and make the change.
3
Re-run the check
0 when nothing blocking
remains.Low-confidence findings
Low-confidence findings are hidden from text output by default to keep the signal high. To see them:Suppress a finding
When a finding is a known, accepted exception, you can stop a specific policy from firing across a project by disabling it in config:.mergeguide/config.yaml
.mergeguide/config.yaml
Machine-readable output
For dashboards, CI, or your IDE’s problems panel, emit JSON or SARIF instead of text:Next steps
Enforcement layers
Where findings surface in your workflow.
Dashboard
Review findings across your repositories.