log inget access →

Connect GitHub.

Install the Perfloop GitHub App on the repos you choose. Perfloop reads your code and opens pull requests for approved changes. You review and merge them.

Write access lets Perfloop push a branch and open a pull request. It never merges or pushes to your default branch.

Access you need

  • contents · read & writeReads code from the repos you select. Selected code, including private code, can enter model context through OpenAI or Anthropic Claude on Google Cloud Vertex AI. No model provider is used without zero-data-retention terms confirmed first. Perfloop does not use your code to train models. Where enabled, security work on a repo, including private code, can use model inference through Fireworks AI.
  • pull requests · read & writePerfloop can open and update an approved PR, comment, submit comment-only reviews, reply to review comments, and request reviewers. It cannot merge, approve, request changes, close a PR, or change draft state.
  • checks · issues · statuses · readReads CI conclusions, commit status, and PR conversation. GitHub exposes ordinary PR comments through its issue-comment permission.
  • administration · readReads the GitHub Actions setting on Perfloop-managed write forks. It cannot change repository settings.
  • metadata · readMandatory for every GitHub App. Reads repo names and metadata.

Not requested: Actions, secrets, members, deployments, or organization-level permissions. The App private key never enters a sandbox.

You control GitHub Actions on your own write fork. Your GitHub settings decide which workflows can run.

PR review

With PR review on, Perfloop posts a comment-only review on pull requests opened or committed to after you turn it on. The review lists unproven Hypotheses tied to the changed code. Perfloop does not review its own pull requests or pull requests from forks.

PR review is off by default. An Admin turns it on per repo in Setup → Automatic work: set PR review to On, then select Save. See Autonomy and limits for what a review costs and how to work a finding.

Setup

1 · select your repos

From Perfloop Setup, install the GitHub App. Choose Only select repositories and select the repos you want to connect. Back in Setup, select the repos for Perfloop to work on, then Save selection. Perfloop works only on the repos you save there. You can change the App's list later in its installation settings.

2 · check branch protection

In each repo, check the rules for your default branch. Require a pull request and review before merge. Keep your existing CI checks required.

3 · review the installation

Open Settings → GitHub Apps → Perfloop in GitHub to check the selected repos and permissions. Your organization's audit log records the app's activity.

Remove access

Uninstall the app, or remove repos from the installation. GitHub then blocks access to those resources. This does not delete records or artifacts already stored by Perfloop; deleting the workspace removes them.

Security questions: security@perfloop.ai