GitHub
Installation
Section titled “Installation”- Go to yaffle.dev/app
- Click Install GitHub App
- Select your organization
- Choose repositories (all or specific)
Permissions
Section titled “Permissions”| Permission | Access | Why |
|---|---|---|
| Contents | Read | Clone repos, read OpenTofu files |
| Pull requests | Write | Post comments |
| Checks | Write | Post plan results |
Yaffle never pushes code.
Webhooks
Section titled “Webhooks”| Event | Yaffle action |
|---|---|
pull_request.opened | Plan + apply preview |
pull_request.synchronize | Plan + apply preview |
pull_request.closed | Destroy preview |
pull_request.closed (merged) | Apply production + destroy preview |
push | Apply to matching environment |
Check runs
Section titled “Check runs”Yaffle posts results as GitHub checks:
Checks:├── CI / tests└── Yaffle / infra Plan: +3 ~1 -0 [Details]Click Details to see the full plan.
Branch protection
Section titled “Branch protection”Require the Yaffle check before merge:
branches: main: protection: required_status_checks: contexts: - "Yaffle / infra"Private repos
Section titled “Private repos”Fully supported. Yaffle clones via the GitHub App installation token—no SSH keys or PATs needed.