Git hosts

Recoder reads pull requests from GitHub and merge requests from GitLab, including self-managed GitLab.

GitHub

Connect a token in Settings, or set GH_TOKEN or GITHUB_TOKEN. The token needs the repo scope. Public repositories work without one. Private clones authenticate through the gh CLI, so tokens never go into clone URLs.

To review new pull requests automatically, add a webhook:

• URL: https://<your-server>/api/webhooks/github
• Content type: application/json
• Events: pull requests
• Secret: the value of GITHUB_WEBHOOK_SECRET

A review is queued when a pull request is opened, reopened or gets new commits, but only for repositories you already track. If GITHUB_WEBHOOK_SECRET is empty, requests are not signature-checked.

GitLab

Connect a token in Settings, or set GITLAB_TOKEN. The token needs read_api and read_repository. For a self-managed instance, enter its URL in Settings or set GITLAB_HOST to its hostname, like gitlab.acme.com.

Tokens connected in Settings are saved in the data directory with 0600 permissions.