GitHub

GitHub App

The Ontoly GitHub App installs on your organization and watches for pull request events. When a PR opens or updates, it builds the graph for both branches, computes a structural diff, and posts a review comment with evidence. No configuration file needed in the repository.

PR review comments

The app posts a single structured comment on each PR with readiness delta, blast radius, API breakage detection, and policy outcomes. Each finding cites specific graph nodes and relationships as evidence.

GitHub Actions

Use Ontoly in GitHub Actions as a verification gate. Build the graph, run checks, and fail the workflow if policies are violated.

# .github/workflows/verify.yml
name: Ontoly Verify
on: [push, pull_request]
jobs:
  verify:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: pnpm/action-setup@v4
      - uses: actions/setup-node@v4
        with:
          node-version: 22
          cache: pnpm
      - run: pnpm install
      - run: pnpm exec ontoly build .
      - run: pnpm exec ontoly coverage . --format json

What the App needs

The GitHub App requires read access to repository contents and pull requests, and write access to pull request comments. It does not need access to code, secrets, or settings beyond what is required for PR comments.

• Repository contents — read (to clone and build the graph)
• Pull requests — read + write (to read PR metadata and post comments)
• No access to secrets, settings, or admin scopes
• Builds run in isolated containers with time and memory limits