Getting started

Install the GitHub App

Bedrock runs as a GitHub App. No CI changes. Install once per repo or org, and every schema-touching PR gets reviewed automatically.

One-line install

bash
gh app install bedrock-db-safety --repo your-org/api

You can also install via the GitHub UI at github.com/apps/bedrock-db-safety. Pick which repos to grant access to. Bedrock requests contents: read, pull_requests: write, and checks: write.

Why we ask for write on PRs
We need pull_requests: write to post review comments and checks: write to mark the PR check pass/fail. We never push commits, never modify your code, never read other repos.

What happens after install

  • Open a PR that touches prisma/schema.prisma.
  • Within ~60 seconds you should see a check named Bedrock / migration safety.
  • Bedrock posts a PR comment with the verdict and a link to the full report at /r/{id}.
  • Sign in at /login to see review history on your org dashboard.
bedrock.yml — planned
A repo-root policy file for custom blocking rules and Slack hooks is on the roadmap. It is not read by the product today — see policy reference (planned).
Docs · Install — Bedrock