new | show | ask | jobs Github

hahn-kev 6 days ago

Why does CodeRabbit need write access to the git repo? Why doesn't Github let me limit it's access?

▲

dpcx 6 days ago | parent [-]

Because it has the ability to write tests for the PR in question.

▲

tadfisher 6 days ago | parent | next [-]

Then it should open a PR for those tests so it can go through the normal CI and review process.

▲

tedivm 6 days ago | parent | next [-]

Doing that requires write access if you're a Github Application. You can't just fork repositories back into another org, since Github Applications only have the permissions of the single organization that they work with. Rulesets that prevent direct pushes to specific branches can help here, but have to be configured for each organization.

▲

dpcx 6 days ago | parent | prev [-]

It updates the existing PR with the tests, I believe. They'd still get reviewed and go through CI.

▲

tadfisher 6 days ago | parent [-]

Right, the downside being that the app needs write access to your repository.

	▲	rahkiin 6 days ago \| parent [-]
		Writing to PR branches should really be some new kind of permission.

▲

flippyhead 6 days ago | parent | prev [-]

It's more than that. If can suggest fixes which you can directly commit.