Direct mode uses explicitly configured GitHub Actions or self-hosted runner credentials. Gateway mode uses server-managed enrollment and sends submitted review context through its relay to the selected provider.
For direct workflow credentials, the helper validates provider auth locally and writes required secrets through gh. Dashboard state only tracks safe setup metadata.
Policy, setup, audit
Customer-owned custody
Called directly from the authorized CI job
# Copy the full repo-scoped Codex command from the ReviewRouter dashboard.
# It uses https://reviewrouter.site/install/codex with a short-lived setup nonce and writes one server-issued versioned namespace directly to GitHub Actions secrets.Submitted review context is sent to the selected model provider, through Account Gateway relay in Gateway mode. ReviewRouter stores review metadata and normalized findings, which may include source excerpts.
Direct workflow credentials are installed in GitHub Actions. Account Gateway credentials use the supported server ingress and protected server custody; they are not exposed through account readback or copied into the review job. Enrollment handles plaintext transiently; stored credentials are encrypted at rest.
The generated workflow avoids automatically exposing secrets to untrusted fork code. Trusted rerun flows should be explicit maintainer actions.
GitHub Actions requests short-lived runtime config through OIDC. Production Codex OAuth rotating runs fail closed if the control plane cannot validate the run.
The SaaS configures review. Your runtime performs review.
| Layer | Owned by | Data handled | Custody |
|---|---|---|---|
Authorized review job | Customer CI runtime | Repository checkout, review context, prompts, model output, scoped review grant | Customer |
Provider credentials | GitHub Actions or protected Account Gateway custody | Direct workflow credentials; Gateway credentials and transient enrollment data | Mode-specific |
ReviewRouter SaaS | ReviewRouter control plane | Setup metadata, policy, audit, health, and protected Account Gateway custody | ReviewRouter |
Review context submitted for a review is sent to the selected model provider. Code running in the authorized CI job can use its scoped review grant. Tool environment filtering reduces exposure; it does not isolate the grant from that job's code.
Permissions support setup and maintenance, not hosted code execution.
Least-privilege map
| Permission | Class | Why it exists |
|---|---|---|
| metadata: read | Read | Discover repository identity and default branch. |
| actions: write | Write | Dispatch exact-revision review runs and read their metadata for durable request tracking. |
| checks: write | Write | Publish ReviewRouter-owned check runs when direct GitHub check integration is enabled. |
| contents: write | Write | Create workflow setup branches and commits. |
| workflows: write | Write | Open PRs that add or update the ReviewRouter workflow. |
| pull_requests: write | Write | Create setup PRs and read setup PR state. |
| secrets: write | Write | Verify required GitHub Actions secret metadata and write encrypted rotating Codex OAuth payloads after OIDC/writeback checks. GitHub does not expose decrypted secret values. |
| organization_secrets: read | Metadata | Verify org-level selected-repository secret metadata for organization-owned repos. ReviewRouter checks whether the current repository is allowed to use the secret. |
| organization_plan: read | Read | Detect whether organization-level Actions secrets can be used for private repositories, so setup can recommend repository secrets when needed. |
| statuses: write | Write | Publish ReviewRouter-owned commit statuses when direct GitHub status integration is enabled. |
| issues: write | Write | Support setup/help comments and issue-style PR conversations. Review execution still runs from customer runtime. |
GitHub repository and organization secret endpoints return metadata only. ReviewRouter uses those checks for setup verification, not decrypted secret access.
Hosted beta needs lifecycle events to keep installations current.
| Event | Why it exists |
|---|---|
| installation | Create, suspend, unsuspend, and uninstall lifecycle events for workspace and installation state. |
| installation_repositories | Repository added/removed events so selected-repository installs stay in sync without manual refresh. |
| pull_request | Detect when setup PRs are merged and advance repository setup state automatically. |
| repository | Refresh repository metadata such as rename, archived state, visibility, and default branch. |
| workflow_job | Track job-level Actions state for runner and review diagnostics. |
| workflow_run | Track workflow completion metadata for live health/status updates. |
| check_run | Receive ReviewRouter-owned check run lifecycle events and rerun requests. |
| issue_comment | Support future slash-command workflows such as rerun or enable review. |
| status | Track commit status updates when direct status integration is enabled. |
Submitted review context is sent to the selected provider. Stored review metadata and normalized findings may include source excerpts.