Operate

Pull request reviews

Brunel comments on pull requests with their infrastructure, cost and security impact before they are merged.

Pull request reviews are available on Business and above, for tracked repositories.

What the comment says

When a pull request is opened or updated on a tracked repository, Brunel analyzes the head commit and compares it with the base branch. The comment summarizes:

Infrastructure impact: components the change adds or makes unnecessary (a new queue, a cache, a database engine…).
Cost impact: the monthly delta on the current design.
Security impact: new findings in dependencies, secrets, Dockerfiles, CI or infrastructure code, with the file and line.

The comment is updated on each push to the pull request instead of adding new ones.

Who comments

With the Brunel GitHub App installed, comments come from brunel[bot] with a token scoped to that repository and pull_requests: write. Otherwise they are posted with the tracking owner's GitHub access.

Notifications

Each review can also go to Slack or your signed webhook as a pr.review event. See Webhooks.