Reference D: PR status values

PR status reports the policy evaluation result and determines the merge outcome. It applies to pull request scans and CI scans. Branch periodic scans have no scan status.

PR status	Meaning	Merge consequence
Passed	The scan completed and no policy violation was detected	The status check reports success and the merge proceeds
Failed	A finding matched an enabled Block PR policy, or a scanner failed while Fail PR on scan error is enabled	The status check reports failure. The merge is blocked where the VCS requires the status check
In Progress	The scan is currently executing	The status check reports a pending state

Important: Configure Cortex AppSec - Code analysis as a required target-branch check. Otherwise, a Failed scan records the violation but does not stop a merge.