fynxlabs/reeve

PR-native, self-hosted GitOps orchestrator for Pulumi

Trust Signals

Scorecard Score: not yet scored
Maintenance Recency: Activelast commit Jul 6, 2026
License: MIT

Pinned Snippet

workflow.ymlSHA-pinned

uses: fynxlabs/reeve@10b7536c0ce6dc0db99878528c26aa95e9af016e # v0.1.0

tags can be moved; commit SHAs can't. why a SHA?

Inputs

name	description	required	default
command	reeve subcommand: "preview", "ready", "apply", "pr-help", "lint", "stacks", "drift run", "locks list", etc. Omit to auto-detect from the GitHub event context.	no	""
root	Path to the consumer repo root (where .reeve/ lives). Defaults to $GITHUB_WORKSPACE.	no	""
pulumi-version	Version of the Pulumi CLI to install. Leave blank to skip.	no	""
github-token	GitHub token (needs issues:write to upsert PR comment).	no	${{ github.token }}
slack-token	Slack bot OAuth token.	no	""
gcp-workload-identity-provider	GCP Workload Identity Provider resource name. Required for GCS bucket auth.	no	""
gcp-service-account	GCP service account email to impersonate via WIF.	no	""
extra-args	Additional args passed verbatim to the reeve subcommand.	no	""
allowed-associations	Comma-separated author_association values allowed to trigger comment commands (/reeve ...). Commenters outside this list are skipped before any command dispatch. The approvals gate still applies afterwards.	no	OWNER,MEMBER,COLLABORATOR
command-prefix	Comma-separated list of comment prefixes accepted as reeve commands. The first word of a comment must exactly match one of these (spaces around entries are trimmed). Default accepts both the slash style ("/reeve apply") and the mention style ("@reeve apply").	no	/reeve,@reeve
run-on-approval	Set "true" to dispatch "run approved" when a pull_request_review is submitted with state approved (requires subscribing the workflow to pull_request_review events). Default "false": approvals do not change code and the apply gate re-checks approvals at apply time, so these runs are pure CI cost. Tradeoff when disabled: you lose the automatic approved-state notification (e.g. the Slack "ready to apply" update) that reeve posts the moment a PR is approved.	no	false
log-level	Log level for reeve (debug, info, warn, error).	no	""

Outputs

no outputs