Install the GitHub App
Bedrock runs as a GitHub App. No CI changes. Install once per repo or org, and every schema-touching PR gets reviewed automatically.
One-line install
bash
gh app install bedrock-db-safety --repo your-org/apiYou can also install via the GitHub UI at github.com/apps/bedrock-db-safety. Pick which repos to grant access to. Bedrock requests contents: read, pull_requests: write, and checks: write.
Why we ask for write on PRs
We need
pull_requests: write to post review comments and checks: write to mark the PR check pass/fail. We never push commits, never modify your code, never read other repos.What happens after install
- Open a PR that touches
prisma/schema.prisma. - Within ~60 seconds you should see a check named
Bedrock / migration safety. - Bedrock posts a PR comment with the verdict and a link to the full report at
/r/{id}. - Sign in at
/loginto see review history on your org dashboard.
bedrock.yml — planned
A repo-root policy file for custom blocking rules and Slack hooks is on the roadmap. It is not read by the product today — see policy reference (planned).