How the checks run
connect-repo deploys two CodeBuild projects for each repository.
| Project | It runs | When | Status on the pull request |
|---|---|---|---|
<repo>-ci | buildspec.yml of the repository | A pull request opens, changes or reopens | ci/codebuild |
<repo>-review | The flow-code-review skill, then reviewdog | A pull request opens or reopens | flow/review |
A webhook build runs only for a pull request from a trusted GitHub user.
#CI
buildspec.yml is in the repository. It installs the packages, generates a key and the types, then runs lint, types and tests. It installs Playwright when the app uses it.
Change it in a task, as you change other code. You review the change in the pull request.
#The Flow review
The build steps of the review are in AWS, not in the repository, so a pull request cannot change them to read the secrets. No code of the pull request runs.
#Prepare
The build checks out
mainin another folder. It installs the packages from there with no scripts, and runsnpx flow install --ci. Then it replaces.claude,.flow,CLAUDE.mdandnode_modulesof the pull request with the ones frommain.#Review
The build fetches the Claude token, then runs the
flow-code-reviewskill. The session can only read files, read the diff, plan the review and write in thetmpfolder of the app. It has a budget of 5 dollars for each run.#Post
The build gets a short-lived token for the review app.
npx flow reviewdogconverts the findings, and reviewdog posts each one on its line.
#Severity
| Severity | reviewdog level | It fails flow/review |
|---|---|---|
critical | ERROR | Yes |
major | ERROR | Yes |
minor | WARNING | No |
nit | INFO | No |
To change the lenses, edit .flow/review.yml. The review reads it from main, so a change applies after you merge it.
#Cost
These numbers come from small tasks on a test project. A larger change costs more.
| Item | Seen |
|---|---|
| CI build | About 2 minutes, about 1 US cent |
| Flow review | 0.42 to 2.67 dollars of Claude usage, as Claude reports it |
| Build session | 3.46 to 3.80 dollars of Claude usage |
| Rework session | About 1 dollar of Claude usage |
| Accept session | About 0.55 dollars of Claude usage |
With a Claude plan and a token from claude setup-token, these sessions count against your plan.
#Why ap-south-1
AWS CodeConnections is not in af-south-1. Of the other regions that were compared, the price of a build is the same, at 0.005 dollars each minute. ap-south-1 is the closest of them to East Africa. To use another region, change FACTORY_REGION, and deploy the connection there.