Zero-config code health checks for your pull requests 🚀

Automatically analyze your repository and post maintainability metrics on every PR. No configuration needed — just drop it in your workflow.

Shift-left code quality — catch maintainability issues before they reach production.

• ✅ Instant feedback — developers see health metrics within seconds on PRs
• ✅ Preventative maintenance — block merges when quality drops below thresholds
• ✅ No configuration required — works out of the box with sensible defaults
• ✅ Language agnostic — analyzes Python, JavaScript, TypeScript, Go, Rust, Java, and more
• ✅ Fast & cached — pipx dependencies cached between runs (~5-8s after first run)
• ✅ Non-intrusive — sticky PR comments (updates in place, no spam)

Use cases:

• Enforce maintainability standards across teams
• Monitor tech debt trends in CI
• Gate releases on code health thresholds
• Onboard new contributors with clear quality metrics

• ✅ Automatic PR comments with health metrics
• ✅ Sticky updates — no comment spam
• ✅ CI quality gates with configurable thresholds
• ✅ Fast caching — pipx packages cached between runs
• ✅ Rich outputs — use metrics in other workflow steps
• ✅ Zero config — works out of the box

Add this to .github/workflows/devscope.yml:

name: Code Health

on:
  pull_request:
  push:
    branches: [main]

jobs:
  health-check:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0  # Full history for git metrics
      
      - uses: EhsanAzish80/devscope-action@v1

That's it! 🎉

Example PR Comment:

📊 Devscope Report

Maintainability: 🟢 B
Risk: 🟢 Low
Onboarding: Easy
⚡ 0.82s

<details>
<summary>Full summary ▼</summary>

───────────────────────────────────────
Devscope: B · Low risk · Easy onboarding · 0.78 tests · 0.82s ⚡

Files: 1,247
Lines: 45,892
Languages: Python (45%) · TypeScript (33%) · JavaScript (12%)

**Metrics:**
- Maintainability Grade: B (82.5/100)
- Risk Level: Low
- Onboarding Difficulty: Easy
- Test Coverage: 78%

Analyze your repo → `pipx install devscope`
Updated: Thu, 13 Feb 2026 15:30:00 GMT
</details>

Features:

• ✅ Emoji indicators 🟢 green (good), 🔴 red (critical)
• ✅ Sticky updates (edits same comment, no spam)
• ✅ Collapsible full summary
• ✅ Performance timing

Fail the workflow if maintainability drops below B:

- uses: EhsanAzish80/devscope-action@v1
  with:
    fail-under: B
    max-risk: Medium
    max-onboarding: Moderate

Exit codes:

• 0 = All thresholds passed
• 1 = Runtime error
• 2 = Threshold violated (fails CI)

- uses: EhsanAzish80/devscope-action@v1
  with:
    path: ./src

- uses: EhsanAzish80/devscope-action@v1
  id: devscope

- name: Check grade
  run: |
    echo "Grade: ${{ steps.devscope.outputs.grade }}"
    echo "Risk: ${{ steps.devscope.outputs.risk }}"
    
    if [ "${{ steps.devscope.outputs.grade }}" == "F" ]; then
      echo "::warning::Code health is critical!"
    fi

For private repos or fine-grained permissions:

- uses: EhsanAzish80/devscope-action@v1
  with:
    github-token: ${{ secrets.CUSTOM_PAT }}

The action posts a beautifully formatted comment on PRs:

Collapsed view:

📊 Devscope Report

Maintainability: 🟢 B
Risk: 🟢 Low
Onboarding: Easy
⚡ 0.82s

Expanded view:

📊 Devscope Report

Maintainability: 🟢 B
Risk: 🟢 Low
Onboarding: Easy
⚡ 0.82s

Full summary ▼
───────────────────────────────────────
Devscope: B · Low risk · Easy onboarding · 0.78 tests · 0.82s ⚡

Files: 1,247
Lines: 45,892
Languages: Python (45%) · TypeScript (33%) · JavaScript (12%)

Analyze your repo → pipx install devscope
Updated: Thu, 13 Feb 2026 15:30:00 GMT

Features:

• ✅ Emoji indicators (🟢 green = good, 🔴 red = bad)
• ✅ Sticky updates (same comment, no spam)
• ✅ Collapsible full summary
• ✅ Timestamp tracking

name: Code Quality

on:
  pull_request:
  push:
    branches: [main, develop]

jobs:
  health-check:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      pull-requests: write
    
    steps:
      - name: Checkout code
        uses: actions/checkout@v4
        with:
          fetch-depth: 0  # Required for git metrics
      
      - name: Run Devscope
        uses: EhsanAzish80/devscope-action@v1
        id: devscope
        with:
          fail-under: B
          max-risk: Medium
      
      - name: Upload metrics
        if: always()
        run: |
          echo "Health: ${{ steps.devscope.outputs.health }}"
          echo "Grade: ${{ steps.devscope.outputs.grade }}"
          echo "Risk: ${{ steps.devscope.outputs.risk }}"

jobs:
  health-check:
    strategy:
      matrix:
        service: [frontend, backend, shared]
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0
      
      - uses: EhsanAzish80/devscope-action@v1
        with:
          path: ./services/${{ matrix.service }}
          fail-under: C

- uses: EhsanAzish80/devscope-action@v1
  with:
    fail-under: ${{ github.ref == 'refs/heads/main' && 'A' || 'B' }}
    max-risk: ${{ github.ref == 'refs/heads/main' && 'Low' || 'Medium' }}

This action uses aggressive caching for fast runs:

Optimization tips:

• Use fetch-depth: 0 for accurate git metrics
• Enable pipx caching (automatic in this action)
• Run on push + PR for best cache hits

Most runs complete in under 10 seconds after initial setup ⚡

permissions:
  contents: read          # Read repository code
  pull-requests: write    # Post PR comments

Minimal setup:

jobs:
  health-check:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      pull-requests: write
    steps:
      - uses: actions/checkout@v4
      - uses: EhsanAzish80/devscope-action@v1

If you want to support PRs from forks:

on:
  pull_request_target:  # Use with caution!

permissions:
  contents: read
  pull-requests: write

⚠️ Security note: pull_request_target runs with write access. Only use if you trust fork contributors or implement additional checks.

Check permissions:

permissions:
  pull-requests: write

Verify trigger:

on:
  pull_request:  # Must include this

The action installs devscope automatically. If it fails:

1. Check Python version (requires 3.9+)
2. Clear cache: Go to Actions → Caches → Delete all caches
3. Re-run workflow

Thresholds only apply on push events, not PRs. PRs show metrics but don't fail.

To enforce on PRs:

on:
  pull_request:
  push:
    branches: [main]

Enable caching:

- uses: actions/checkout@v4
  with:
    fetch-depth: 0  # Faster git operations

This action follows semantic versioning:

• @v1 — Latest v1.x.x (recommended, auto-updates)
• @v1.0.0 — Exact version (pinned, no updates)
• @main — Latest commit (unstable, for testing)

Recommended:

- uses: EhsanAzish80/devscope-action@v1

This action:

• Installs devscope via pipx
• Caches Python dependencies for speed
• Analyzes your codebase (Python, JS, TS, Go, Rust, Java, etc.)
• Posts formatted PR comments
• Enforces quality gates on push events
• Provides structured outputs for custom workflows

Contributions welcome! Please:

1. Fork the repo
2. Create a feature branch
3. Test locally with act
4. Submit a PR

Local testing:

# Install act
brew install act

# Test workflow
act pull_request -j health-check

MIT License - see LICENSE file.

Built with:

• devscope — The analysis engine
• actions/github-script — PR comment management
• actions/setup-python — Python setup with caching

• 🐛 Report a bug
• 💡 Request a feature
• 💬 Discussions