GitHub Agent

Your senior platform engineer on GitHub

What it does

A full-stack GitHub specialist that reads code, leaves real PR review comments, diagnoses failing CI from actual job logs, creates proper changelogs, and manages repo health. Works independently or as the quality gate after other agents in the Software Factory pipeline.

What it can do

PR Review with Inline Feedback

Reads the full diff of every pull request, evaluates correctness, security risks, missing error handling, and test coverage, then submits a structured review with inline comments at exact file positions. Approves clean code or requests changes with specific, actionable feedback.

“Review all open PRs and give every author clear feedback”
“Check PR #47 for security issues and code quality before we merge”
“Review the auth refactor PR — flag anything that could break existing sessions”

CI/CD Diagnosis and Recovery

Checks recent workflow runs, finds the failing job, reads the actual log output (not just "build failed"), identifies the root cause, and either fixes the code and opens a PR, or creates a detailed issue with the diagnosis. Can also rerun failed jobs and trigger workflow dispatches.

“Our tests have been failing for 3 days — read the CI logs and tell me what's actually broken”
“Find all repos with failing CI on main and create issues for each”
“Trigger a deployment workflow on the staging branch”

Release Management

Finds the last release tag, lists all commits and merged PRs since then, groups them by type (Features, Bug Fixes, Breaking Changes, Internal), and writes a proper human-readable changelog. Creates the GitHub release with the right semantic version tag.

“Create the v2.1.0 release — pull all changes since v2.0.0 into a proper changelog”
“Draft a release for QA review — create as draft so I can approve before publishing”
“Create patch releases for each of the 3 hotfixes we merged today”

Repo Health Auditing

Scans for stale branches that haven't been merged, PRs without any reviewer assigned, Dependabot security alerts by severity, and open issues that have been sitting for over a week. Produces a full health report and optionally takes action.

“Audit our repo: show me all stale branches, unreviewed PRs, and open security alerts”
“Clean up all merged branches older than 2 weeks”
“Find all critical and high severity Dependabot alerts and create fix issues for each”

Issue Management

Creates properly structured GitHub issues from bug reports, CI failures, or audit findings. Includes reproduction steps, expected vs actual behavior, severity, and suggested assignees. Can comment on, triage, and close existing issues.

“Create a bug issue from this Sentry error report: user login fails on mobile Safari”
“Triage all open issues — label them by priority and assign to the right team member”
“Close all issues that were fixed in the v1.3.0 release with a closing comment”

Branch Governance

Sets branch protection rules requiring PR reviews and passing CI before merge, dismisses stale approvals on new pushes, and enforces team conventions. Deletes stale branches only after verifying they are fully merged.

“Set up branch protection on main: require 2 reviews and CI to pass”
“Delete all branches that were merged more than 30 days ago”
“Add required status checks for our new e2e test workflow to the main branch”

Good for / not for

Great for

Teams where PR reviews are a bottleneck or inconsistent
Debugging CI failures that are hard to trace from the UI
Sprint endings — automated release notes instead of manual changelog writing
Catching security vulnerabilities in dependencies before they become incidents
Onboarding repos to team conventions (branch protection, issue templates)
As a quality gate in the Software Factory pipeline after Code Generator

Not the right fit for

Running your application code (that's the Backend or Infrastructure Agent)
Managing GitHub Actions secrets or environment variables (security boundary)
Reviewing PRs that require business-domain knowledge the agent wasn't briefed on
GitHub Enterprise-specific features like GHES custom APIs

Example tasks

“Review all open PRs, approve clean ones, request changes on the problematic ones with specific feedback”
“Our CI has been failing for 2 days. Read the job logs, find the root cause, and fix it or create a detailed issue.”
“Create a v1.3.0 release — gather all merged PRs since v1.2.0, write a grouped changelog, tag and publish.”
“Audit this repo: Dependabot alerts, stale branches older than 30 days, PRs with no reviewer assigned.”
“Set up branch protection on main: require 1 approving review and CI to pass before merge.”