# Issues reported in GitHub

## Pull request decoration <a href="#pull-request-decoration" id="pull-request-decoration"></a>

SonarQube Server provides issue reporting for GitHub pull requests. Besides the pull request analysis summary found in the Checks and Conversation tabs, you will also see issues reported as inline annotations directly within the Files changed tab as illustrated below.

<figure><img src="broken-reference" alt="Issues are reported as inline annotations in the Files changed tab."><figcaption></figcaption></figure>

From an inline annotation, you can:&#x20;

* View the corresponding issue in SonarQube: copy-paste in your browser the **See more on** link below the annotation text.
* View the pull request analysis summary in SonarQube: select the **View details** button. \
  If this button is not available, select the **Try the new experience** link in the top right corner of your pull request page as illustrated below.

<figure><img src="broken-reference" alt="Select the Try the new experience link to enable the View details button in SonarQube&#x27;s inline annotations."><figcaption></figcaption></figure>

{% hint style="info" %}
Pull request decoration requires that pull request integration be correctly configured for your project. See [#pull-request-integration](https://docs.sonarsource.com/sonarqube-server/devops-platform-integration/github-integration/setting-up-at-project-level#pull-request-integration "mention").
{% endhint %}

## Code scanning alerts <a href="#code-scanning-alerts" id="code-scanning-alerts"></a>

When you analyze a project in SonarQube, the detected security issues are displayed on the GitHub interface as code scanning alerts, if set up in your system. When you change the status of a security issue in the SonarQube interface that status change is immediately reflected in the GitHub interface. Similarly, if you change the status of a code scanning alert in GitHub, that change is reflected in SonarQube.To view and manage your code scanning alerts:

1. In GitHub, go to your repository’s **Security** > **Code scanning alerts** tab.
2. Select **View alerts** to see the full list.

<figure><img src="broken-reference" alt="Managing your code scanning alerts in GitHub"><figcaption></figcaption></figure>

## Related pages <a href="#related-pages" id="related-pages"></a>

[setting-up-at-project-level](https://docs.sonarsource.com/sonarqube-server/devops-platform-integration/github-integration/setting-up-at-project-level "mention")\
[report-security-alerts](https://docs.sonarsource.com/sonarqube-server/devops-platform-integration/github-integration/setting-up-at-global-level/report-security-alerts "mention")