Connect GitHub review automation
Goal
Enable repository-scoped pull-request reviews and eligible follow-up fixes without placing a personal GitHub token in Redgold or repository secrets.
Prerequisites
- administrative permission to install GitHub Apps for the organization;
- the repository and branches that automation may access;
- a Redgold workspace approved for repository automation;
- an agreed reviewer-only or reviewer-and-fixer mode.
Steps
- Install the Redgold GitHub App and select only the intended repositories.
- Ask Redgold to bind the installation and repository to the workspace.
- Confirm whether review, fixer, and issue-driven automation are enabled.
- Open a small pull request that changes a documented or tested behavior.
- Confirm that the App posts against the current commit and that normal repository checks still run.
Installing the App grants repository access but does not activate a workflow until the binding and modes are configured.
Expected result
The pull request shows a review from the App identity. When fixer mode is enabled and an eligible finding is accepted, a follow-up commit appears on the pull-request branch and the repository's checks evaluate it.
Failure modes
| Symptom | Check |
|---|---|
| No review appears | Confirm repository selection, workspace binding, enabled mode, and current installation status |
| Review targets an older commit | Push or synchronize the branch, then wait for the current event to be processed |
| A fix cannot be written | Check branch protection, App contents permission, and whether fixer mode is enabled |
| Duplicate comments appear | Confirm that only one repository automation binding is active |
Reference
See GitHub App repository automation for permissions, credentials, and lifecycle boundaries.
Rate-limit retries
Handle 429, 402, and 502 the way the model API expects — honor Retry-After, back off with jitter, and correct what you should not retry.
Delegate a task to another agent
Send bounded work to an assisting agent through customer REST control or an authorized managed agent-cli environment.