> ## Documentation Index
> Fetch the complete documentation index at: https://docs.amnify.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Scan automation and schedules

> What runs automatically, per scope.

Every scope has its own automation settings, all on one page. Nothing is on by default, so agents only run where you have asked them to.

## Repository scopes

<CardGroup cols={2}>
  <Card title="Scheduled scan" icon="calendar-clock">
    A full scan of the repository, daily, weekly or monthly.
  </Card>

  <Card title="Scan on push" icon="code-branch">
    Scans the pushed commit range. Overlapping pushes merge into one run.
  </Card>

  <Card title="Re-scan on new CVE" icon="radar">
    Free hourly monitoring. A dependency check runs when a match is disclosed. See [CVE disclosures](/scanning/cve-disclosures).
  </Card>

  <Card title="PR reviews" icon="code-pull-request">
    A security review with inline comments on every pull request. See [Pull request review](/workflow/pr-reviews).
  </Card>
</CardGroup>

<Info>
  Enable at least one of **Scan on push** or **PR reviews** for every active repository. One catches a problem before it merges, the other catches what reaches your default branch. Without either, new code waits for the next scheduled scan.
</Info>

You can also refresh a repository's dependency inventory from here.

## Cloud scopes

Accounts, subscriptions and projects support a scheduled full scan, daily, weekly or monthly, and a manual scan at any time.

```mermaid theme={null}
flowchart TB
  SCH["Schedule"] --> Q["Run queue<br/>one at a time per scope"]
  PSH["Push to default branch"] --> Q
  CVE["New advisory affecting you"] --> Q
  MAN["Manual start"] --> Q
  Q --> SC["Scan"]
  SC --> FN["Findings"]
```

<Note>
  PR reviews are independent of scan automation. Enabling one never enables the other. Penetration test schedules live on the [Set up a pentest](/pentest/overview) page, because they also carry the engagement and package to run.
</Note>
