i use Sonar, SNYK, Fortify and regression test for my personal project.

here are my questions:

1. As Sonar, SNYK, Fortify is on code level, should i implement gate on Dev branch so that i can contain errors to Dev Branch and dont allow bugs to main branch?
   a) if i put gates on Dev branch, i see that there is a possibility that if i find a quality gate breach in Dev Branch for snyk, i can still go ahead and merge on main branch without fixing on Dev
   b)if i do on main branch, it could be that i am letting errors reach main and would take long time to fix it.

my thought: it would be better to have gate on both dev ( to catch vulnerability earlier and check code quality improvement) and main branch ( so that i can manke sure there is no direct commits)

2.with Sonar, SNYK, Fortify and regression test tools publishing results, is there a way that i can accumulate for a single place to refer what were results for a particular release.