pull_request
Runs a review when a pull request opens (including drafts) and posts a new comment on synchronize (collapsing the previous review).
Trust
GitHub App permissions
Pacecar installs as a GitHub App on your organization. No PATs, deploy keys, or standing personal credentials. You can review the exact permission set on the App listing before or after install.
Short version: we read PR diffs to review them, and we write review comments. The only branch we push proposes .pacecar/review.md. We do not merge, manage secrets, or change org settings.
Repository permissions
What we request and why
| Permission | Access | Used for |
|---|---|---|
| Metadata | Read | Required baseline for every GitHub App. Identifies the installation and repositories Pacecar can access. |
| Contents | Read & write | Read pull request diffs and related file content for review. Write is used only to open a branch and pull request that adds or updates .pacecar/review.md. Pacecar does not commit to the default branch or change other files. |
| Pull requests | Read & write | Read PR metadata and post Pacecar’s review comments (and collapse superseded ones). Write is limited to review comments — not merging, approving as a required reviewer, or changing branch protection. |
| Issues | Read & write | Required by GitHub for pull request comments (issues and PRs share the comment API). Used to create review comments and mark prior Pacecar reviews outdated. |
Least privilege
What we do not request
- Actions secrets, organization secrets, Dependabot secrets, or Codespaces secrets
- Actions variables or environments
- Administration (repository or organization)
- Members, teams, or membership management
- Packages, deployments, or Dependabot
- Workflows write access, or commits on the default branch
Pacecar cannot read secret values, change org or repository settings, manage membership, or merge pull requests. Uninstall the App anytime to revoke access.
Webhooks
Events we subscribe to
installation lifecycle
Standard GitHub App install, repository selection, and uninstall events so Pacecar can start or stop reviewing for your org.
See the checklist we run with those permissions.
Same six categories on every PR — security, intent, scope, logic, reliability, contracts.