GitHub

What it watches

GitHub feeds Code: what changed in each publish, and later, repairs.

What Keelnest reads

• Credential: GitHub App.
• Reads: repository metadata, commits, pull requests, deployments and Dependabot alerts; writes its own fix branches and pull requests, merged when you approve, a rules pull request when you press Teach your builder, never merged by Keelnest, and with the config check on a comment or the Keelnest check on pull requests; push, pull request and Dependabot alert webhooks.

Optional for founders who publish from a builder without GitHub sync.

The one connection that can write, and only in three ways. When you ask for a fix, or on its own for an app whose owner turned on automatic fixes, Keelnest commits it to a branch of its own and opens a pull request, checks it on a preview, and merges it only when a named person approves the exact revision it checked, except a verified Dependabot security update on an app whose owner turned on auto-merge. When you press Teach your builder, it opens a pull request that adds its rules for AI coding tools, on a new branch, and never merges it. With the config check on, it reports the Keelnest check, or a comment, on your pull requests. It never refunds, charges, changes a price, edits a setting or an environment variable, or runs a migration, and the installation can be removed from GitHub at any time. Security says the whole of it.

How to connect

1. Install the app. In your workspace, open Integrations, find GitHub and press Connect. You are sent to GitHub to choose the account and the repositories Keelnest may watch, and back again.
2. Tie each application to its repository. Under Manage, or on the application’s Configuration tab, name the repository it is built from. From then on every publish lists the commits and files behind it.
3. Turn on Dependabot. On GitHub, open each repository’s Settings, then Advanced Security, and turn on Dependency graph, Dependabot alerts and Dependabot security updates. On Studio and above, Security updates in Keelnest shows which repositories have it on.