Share and revoke results

Two sharing scopes

Guard supports project publication and repository-summary publication. A public project exposes only the repositories selected by the project owner through a read-only project URL. A public executive summary exposes one finished summary through its own link. These controls are independent; publishing one does not automatically publish the other.

Publish a project view

Only the project owner can change project publication. Select the repositories that should appear, save the settings, and copy the generated public project URL. Removing every repository disables the public project view. People using the link receive read-only public routes for the selected repositories and allowed result surfaces, not authenticated owner controls.

Review repository names, audit reports, history, recon context, Activity, and any source details that the public view makes reachable before sharing. Do not select a repository simply because its code provider is already public; Guard report visibility is a separate decision.

Publish a repository summary

When generating a summary, choose Public link to make the finished page shareable, or Private to keep it inside Guard for project members. A ready private summary can be published later. The summary link remains available until you make it private, revoke it, or delete the report.

Copying a URL does not change its visibility. Confirm that the access badge says Public before sending it to someone outside the project.

Make private, revoke, or delete

Make private removes public access while preserving the finished summary for authorized project members. Revoke invalidates public access and records the revoked state. Delete report removes the summary from the list and prevents it from being opened. Choose the least destructive control that matches the need.

For a project view, save publication with no selected repositories to disable the public URL. The underlying project, repositories, audit history, and Fleet execution records remain intact.

What sharing does not change

Publication does not modify repositories, rerun audits, merge changes, grant provider access, or delete execution history. Revoking a Guard link cannot retract copies someone already downloaded, pasted, or captured while access was public.

Treat a public report as a disclosure decision. Recheck redaction, target scope, repository selection, and current relevance before publishing, and rotate access by revoking rather than assuming an unshared-looking URL is secret.