Get Watchflow running in a few minutes: install the app, add .watchflow/rules.yaml, and verify with a PR or push. No new dashboards—everything stays in GitHub.
- Rule evaluation on every PR and push against your YAML rules.
- Check runs and PR comments when rules are violated (or when no rules file exists, a welcome comment with a link to set one up).
- Acknowledgment in-thread:
@watchflow acknowledge "reason"where the rule allows it. - One config file —
.watchflow/rules.yamlon the default branch; rules are loaded from there via the GitHub API.
- GitHub repo where you have admin (or can install a GitHub App).
- A few minutes to install the app and add a rules file.
- Go to Watchflow GitHub App.
- Click Install and choose the org/repos you want to protect.
- Grant the requested permissions (webhooks, repo content for rules and PR data).
Watchflow will start receiving webhooks. If there’s no .watchflow/rules.yaml yet, the first PR will get a welcome comment with a link to watchflow.dev (including installation_id and repo) so you can run repo analysis and create a rules PR without entering a PAT.
Option A — From the welcome comment (no PAT)
- Open a PR (or any PR) and find the Watchflow welcome comment.
- Click the link to watchflow.dev/analyze?installation_id=…&repo=owner/repo.
- Run repo analysis; review suggested rules and click Create PR to add
.watchflow/rules.yamlto a branch.
Option B — Manual
Create .watchflow/rules.yaml in the repo root on the default branch, for example:
rules:
- description: "PRs must reference a linked issue (e.g. Fixes #123)"
enabled: true
severity: high
event_types: ["pull_request"]
parameters:
require_linked_issue: true
- description: "When a PR modifies paths with CODEOWNERS, those owners must be added as reviewers"
enabled: true
severity: high
event_types: ["pull_request"]
parameters:
require_code_owner_reviewers: true
- description: "No direct pushes to main - all changes via PRs"
enabled: true
severity: critical
event_types: ["push"]
parameters:
no_force_push: trueParameter names must match the supported conditions; see Configuration for the full reference.
- Open a PR (or push to a protected branch if you use
no_force_push). - Check GitHub Checks for the Watchflow check run (pass / fail / neutral).
- If a rule is violated, you should see a PR comment with the violation and remediation hint.
- Where the rule allows it, reply with:
@watchflow acknowledge "Documentation-only change, no code impact"(or@watchflow ack "…").
| Command | Purpose |
|---|---|
@watchflow acknowledge "reason" / @watchflow ack "reason" |
Record an acknowledgment for a violation (when the rule allows it). |
@watchflow evaluate "rule in plain English" |
Ask whether a rule is feasible and get suggested YAML. |
@watchflow help |
List commands. |
- Tune rules — Configuration for parameter reference and examples.
- See supported logic — Features for all conditions and capabilities.
- Architecture — Concepts / Overview for flow and components.
Watchflow: the immune system for your repo. Rules in YAML, enforcement in GitHub.