Require the Socket check before merging

To block merges when a pull request introduces an alert set to Block, make Socket's check a required check in your Origin repository's merge rules.

The check to require is Socket Security / Dependency scan. It fails when the pull request introduces an alert set to Block and passes when it doesn't. See How pull request scanning works for every result.

Add the required check

Make the check required in the repository's branch rules:

1. In Origin, open the repository's Settings and go to Rules and Protections.
2. Add a rule for your default branch, or edit the rule that already covers it.
3. Require the Socket Security / Dependency scan check, and save the rule.
4. Open a pull request that changes a manifest file. The merge stays blocked until the Socket check finishes, and a failed check blocks the merge.

Choose what blocks a merge

Only alerts set to Block fail the check. To change which alerts block a merge, set their alert actions in your security policy.