Autonomous coding agents

Run coding and maintenance work that lands in review.

Attach a customer-configured execution environment for files, shell, git, and tests. The agent can investigate issues, update dependencies, fix failing CI, or handle maintenance across the repositories the task needs, then push review branches while merge remains separate.

Example authority for a coding task

Let the agent produce reviewable work. Pause when it crosses into production.

Pull requests are usually normal output, not the risky moment. Scope GitHub by repository and branch pattern, then use a separate deploy, production-data, or internal API grant when the task may affect a live system.

Allowed

Clone and update selected repositories

Push matching agent/* branches

Open and update pull requests

Run tests and deploy to staging

Ask first

Deploy this reviewed commit to production

Read sensitive production data

Run a destructive maintenance action

Not granted

Push directly to protected branches

Merge pull requests

Use other repositories or environments

Retrieve underlying provider credentials

The exact production actions depend on the deploy or internal tool the customer connects. Without that separate grant, the coding agent cannot cross the boundary.

From task to review

Keep the coding task reviewable from branch to PR.

Use a configured VM, container, or local machine to inspect and test the code. Let the agent push matching review branches and open pull requests without interruption. Keep protected branches, production access, deploys, and destructive actions behind separate grants.

Selected repositories

Give the agent the repositories the task needs.

A task can use one repository or several without handing the agent a user-level token for everything the human can access.

Review output

Let changes land somewhere inspectable.

Allow matching review branches and pull requests as normal output. Keep merge authority separate rather than asking for approval on every PR.

Repeat later

Schedule or trigger maintenance when it is ready.

After the manual path works, schedules, events, and workflows can reuse the same repository and action grants.

Where teams start

Coding and maintenance tasks that finish in review.

1Dependency update with test output and a PR.
2Failed CI investigation that pushes a focused branch.
3Incident fix that can reach staging but asks before deploying the reviewed commit to production.

Related engineering paths

Connect the tools and execution path behind the coding work.

Start a coding task

Connect GitHub, push a review branch, and keep merge authority separate.

The fastest first test is a coding task that ends in a branch, test output, and a PR someone can inspect.

Connect GitHubRead GitHub quickstart