Quickstart
Get a repository reviewed in about two minutes.
The fastest path is the GitHub App: install it, and the next pull request is reviewed. No tokens, no YAML, no config file.
Install the GitHub App
Open the dashboard and click Add to GitHub. GitHub walks you through picking the repositories to grant, and signs you in at the same time — the install is the sign-up.
Your first 20 reviews are free, so nothing needs to be paid before you see output.
Open a pull request
New pull requests and commits on the repositories you granted trigger a review automatically. Findings arrive as inline comments on the changed lines, with a summary comment on the PR itself.
Everything also lands in the dashboard under Repositories, where findings can be resolved or dismissed. Add or remove repositories at any time from GitHub's app settings.
Scan the whole repository
A review reads a diff. To find what is already wrong — before this branch — run a security scan. The quickest one is over the code on your disk:
npm install -g @patchlight/cli
patchlight login
cd your-repo && patchlight scan --diff--diff reads only what your branch changed, uncommitted work included. It takes seconds and costs
cents. See the CLI guide for the full-repository and directory modes.
Wire it into CI (optional)
Not on GitHub, or want the review to gate a merge? The SDK's CLI submits a diff from any pipeline:
export PATCHLIGHT_API_KEY=pl_sk_...
npx @patchlight/sdk review --wait --fail-on highCreate the key in the dashboard under App → API Keys — it is shown once — and store it as a masked CI secret. CI/CD integration has copy-paste jobs for GitLab, Bitbucket, Azure Pipelines, and GitHub Actions.