Projects
Projects are the primary technical unit in HenKaiPan. Each project represents a codebase you want to scan.
Product Model
Apps (Optional)
Business-level groupings for organizing projects:
- Example: "Mobile App", "Web Platform", "Internal Tools"
- Apps are optional — projects can exist standalone
- Useful for team-level rollups and filtering
Projects
The core unit that you:
- Create manually or import from GitHub
- Connect to a Git repository
- Configure scans for
- Review findings from
Creating a Project
Via Onboarding Wizard
First-time users see a guided flow:
- Create App (optional)
- Enter project name
- Connect GitHub repository or enter manually
- Add GitHub token for private repos
Manual Creation
- Go to Projects page
- Click New Project
- Fill in:
- Name (required)
- App (optional)
- Repository URL
- GitHub token (for private repos, encrypted at rest)
GitHub Integration
GitHub App Installation
For automated PR comments:
- Install HenKaiPan GitHub App on your org/repo
- Link installation to project
- Scans will comment on PRs with findings
Personal Access Tokens
For scanning private repositories:
- Token stored encrypted in database
- Used during scanner execution
- Rotate tokens periodically
Project Settings
Scan Configuration
- Default scanner pack
- Scan schedule (cron expression)
- Notification rules
Team Access
- Assign team members
- Set role-based permissions
Scan History
Each project shows:
- Last scan date and status
- Total scans executed
- Findings trend over time
- Scanner failure rate
Standalone Projects
Projects can exist without an App (app_id = NULL):
- Useful for small teams or single-repo setups
- Global Projects view shows all projects regardless of app
Deleting Projects
⚠️ Warning: Deleting a project removes:
- All associated scans
- All findings
- Scan schedules
- Knowledge articles linked to findings
This action cannot be undone.
Previous: ← Scans
Next: Compliance →