Integrations

Integrations

This page documents the bots and automation currently integrated with the repository.

Current Integrations

GitHub Actions (Built-in)

Workflow	Purpose	Status
CI	Lint, test, build	Required
Security	CodeQL, dependency review	Required
Pages	Documentation deployment	Automatic
Release	Snapshot releases on main	Automatic
Stale	Close inactive issues/PRs	Runs daily
Labeler	Auto-label PRs by files	On PR open

Dependabot

• Frequency: Weekly
• Scope: GitHub Actions, Python dependencies
• Auto-merge: No (requires PR approval)
• Location: .github/dependabot.yml

Auto-Assignment Bot

• Workflow: .github/workflows/auto-assign.yml
• Behavior: Assigns new issues to @kleinpanic by default
• Customization: Can route based on labels

Potential Additions

These are free integrations that could improve workflow:

Codecov

• Purpose: Coverage reports on PRs
• Cost: Free for public repos
• Setup: Add token to secrets
• Benefit: Visible coverage trends

Renovate (Alternative to Dependabot)

• Purpose: More configurable dependency updates
• Cost: Free
• Benefit: Grouped updates, automerge options

Semantic Release

• Purpose: Automated versioning/changelogs
• Cost: Free (GitHub Action)
• Benefit: Semantic version management

Code Climate

• Purpose: Code quality metrics
• Cost: Free for open source
• Benefit: Maintainability tracking

WakaTime

• Purpose: Time tracking for coding
• Cost: Free for public repos
• Benefit: Project time insights

All Contributors

• Purpose: Recognize all contributors
• Cost: Free bot
• Benefit: Team recognition

Recommendation

Add: Codecov for coverage visibility

Consider: Renovate if Dependabot becomes noisy

Skip: Semantic Release (already have snapshot releases)

Bot Governance

All bots should:

1. Have clear documentation
2. Be reviewed before adding
3. Not create notification spam
4. Be removable if problematic

Current maintainer (@kleinpanic) approves all new integrations.