Skip to main content

Installation

ZAR runs as a GitHub App. There are two ways to install it:
  • Hosted — install from the dashboard at app.zarlabs.tech (or the GitHub Marketplace listing when available). This is the path most teams want.
  • Self-hosted — run your own instance and register your own GitHub App. See Self-hosting.
This page covers the hosted install and the permissions ZAR asks for in either case.

Hosted install

  1. Go to app.zarlabs.tech and sign in with GitHub.
  2. Click Connect a repo.
  3. On GitHub’s installation screen, choose the owner, select Only select repositories, and pick the repos you want ZAR to watch.
  4. Approve the requested permissions and events.
You can add or remove repositories any time from GitHub → Settings → Applications → Installed GitHub Apps, or from the ZAR dashboard.

Permissions and events

ZAR requests the least privilege it needs to read diffs and post reviewable feedback.
PermissionLevelWhy ZAR needs it
MetadataReadRequired for every GitHub App.
ContentsRead & writeRead code diffs and doc files; write doc updates only if you enable auto-commit.
Pull requestsRead & writeList changed files and post review comments / docs PRs.
IssuesRead & writeReply to @docagent commands and post the welcome issue.
ChecksRead & writeCreate the optional docagent/ci-gate check run.
Commit statusesRead & writePost the zar/docs status on analyzed commits.
Webhook events ZAR subscribes to:
EventUsed for
pushAnalyze commits pushed to the watched branch.
pull_requestAnalyze PRs (opened, synchronize, ready_for_review, and merges).
issue_commentRun @docagent / /docagent commands.
installationOnboarding when ZAR is installed or removed.
installation_repositoriesOnboarding when a repo is added to an existing install.
installation and installation_repositories are delivered to every GitHub App by default — there’s no separate checkbox for them.
Full detail, including the exact Contents: write rationale: Permissions & events.

What happens right after install

On a fresh installation ZAR does a little onboarding so you’re not staring at a blank screen:
  • Welcome issue. ZAR opens an issue titled ”👋 ZAR is ready” with a short orientation and links to the dashboard.
  • Welcome email. If the operator has email configured, the installer gets a short “ZAR is installed” message (with different copy depending on whether your team has complimentary access).
  • Welcome PR (first repo only). A few seconds after install, ZAR opens a demo PR on a branch named zar/welcome that adds a small .zar/welcome.md file explaining how it works. This is a one-time illustration — merge it or close it, your choice. It’s skipped if your repo already has ZAR activity.
These steps are idempotent: reinstalling or adding more repos won’t spam you with duplicates.

Choosing what ZAR watches

By default ZAR watches your repository’s default branch and behaves conservatively (no auto-commit, no CI gate). Before turning it loose on everything, you’ll usually want to:
  1. Set a trigger mode (default: on_significant_change).
  2. Optionally add a .zar.yml to version your settings in the repo.
  3. Optionally set a style guide so edits match your voice.

Next steps