Configure a review identity and light auto-approval
Run reviews as a dedicated identity and optionally auto-approve light PRs.
Goal: get native review verdicts under a bot or app account.
Prerequisites
- Review enforcement
enabled - A host App or machine user that does not open PRs
Steps
- Create the identity
- On your code host: grant it the permissions your host guide lists; store the credential outside the repo.
- Declare it
- In your assistant: set Review identity to
apporbot-userinway-of-working.md. - With
/pair-assistant(optional, Claude Code): shows the diff, validates and writes.
- In your assistant: set Review identity to
- Provision the login (bot-user only)
- On your code host: set the
REVIEW_IDENTITY_LOGINrepository variable.
- On your code host: set the
- Opt in to light approval (optional)
- In your assistant: declare the
lightfamily in## Tag Projectionand restrict who can apply the label.
- In your assistant: declare the
Verify
- A review is published as the identity.
- A
risk:redPR still needs a second human.