Setup guide

Set up TagBot

Install it once. Labels and a summary comment appear on the next pull request. There is no configuration.

Install free on GitHubAbout TagBot

Three steps

  1. Install from GitHub Marketplace

    Install TagBot on the repositories or organisation you want labelled.

  2. Grant permissions

    TagBot asks for Pull requests (read and write) and Metadata (read). It reads the pull request file list, never file contents.

  3. Open a pull request

    TagBot runs when a pull request is opened, reopened, or updated with a push. Pushes made by bots are skipped.

What you get

Labels and a comment

  • Complexity, 0 to 10

    A capped, weighted sum over lines changed, file count and change indicators. complexity:medium from a score of 4, complexity:high from 7. A documentation-only pull request scores 1.0.

  • Risk

    risk:medium or risk:high; no label when low. A sensitive-path scan (dependency manifests, workflows, migrations, .env, auth and infrastructure files) or a complexity of 8 or more makes it high.

  • Type and more

    One type label from type:feature, type:bugfix, type:documentation, type:refactor, type:testing, type:security, type:performance, type:hotfix, type:revert, type:maintenance, type:style or type:ci-cd. Plus size, language, docs, config, database, infrastructure, breaking-change and dependencies labels.
  • 📏 size:small
  • 🏷️ type:documentation
  • docs:markdown
tagbotcommented on this pull request

PR analysis summary

Risk LOWComplexity 1 / 10Files 2

Documentation-only change. Two Markdown files, 41 lines added, 6 removed. No sensitive paths touched.

Privacy

What is stored, and what is not

Stored

  • Your GitHub account ID and organisation name.
  • The installation timestamp and repository list.
  • Aggregate statistics per repository: pull requests analysed, files processed, lines changed, average complexity, risk counts.

Not stored

  • Source code or file contents.
  • Pull request descriptions or comments.
  • Commit messages or diffs.

TagBot reads pull request metadata from GitHub to produce its analysis. Nothing is sent to a model. Data is held in Azure Table Storage, UK South. More on the security page.

Questions or problems?

TagBot is free, and so is asking. Raise a ticket on our service desk or email us.

Get supportInstall TagBot