Neo code reviews
Neo code reviews analyze pull requests against what Pulumi Cloud knows about your running infrastructure and leave feedback in the pull request. They read the pulumi preview output and comment inline on the specific lines that need attention. Neo does not block the merge.
Automated reviews
By default, Neo reviews every pull request automatically, skipping drafts and pull requests opened by bots.
Manual reviews
You can scope Neo to review only when someone mentions @pulumi-neo, instead of automatically. Mention it in a pull request description, a review comment (top-level or inline), or an issue, and Neo replies in the same thread. Ask it to walk through what a change does, including resources that change in stacks the pull request does not modify directly.
Neo matches your GitHub identity to your Pulumi user. If you signed in to Pulumi with GitHub, that link already exists; otherwise, link a GitHub identity to your Pulumi account.
Availability
Neo code reviews run on GitHub.com. GitHub Enterprise Server is not supported. Code reviews are enabled by default for organizations with Pulumi Neo turned on. If Neo already posts preview summaries on your pull requests, Neo code reviews replace them.
Setup
- Enable Pulumi Neo for your organization.
- Install the Pulumi GitHub App on the repositories you want Neo to analyze.
- Confirm Neo code reviews are enabled in your GitHub App integration settings. They’re on by default.
- Grant Pulumi access to your GitHub account by completing the individual OAuth flow under Management > Version control.
Permissions
Neo code reviews run with the same governance as any other Neo task, including the role-based access control, guardrails, and audit logging your organization has configured. To turn them off, disable Neo code reviews in your GitHub App integration settings.
Thank you for your feedback!
If you have a question about how to use Pulumi, reach out in Community Slack.
Open an issue on GitHub to report a problem or suggest an improvement.