Stackat documentation
On this page
Stackat is a GitHub App for platform teams. It finds the Helm charts, Terraform providers and container images your repositories pin, reads every upstream release note between your version and the latest, and opens one GitHub issue per tool that says what the upgrade means for your files.
What you get#
- One issue per tool that is behind, labelled
stackat, with a verdict (safe to upgrade, review, edits needed, migration), a risk of high, medium or low, and the exact keys and lines a breaking change touches. See How issues work. - Pull requests, if you want them: a ready one when nothing in the notes touches your files, a draft with the checklist when something does. See Pull requests.
- Replies on the issue steer it:
/stackpaw pr,/stackpaw ignore,/stackpaw reevaluateand more. See Commands. - A dashboard at app.stackat.dev with what to do next, every tool behind, and dated audit evidence. See Dashboard.
- Slack: urgent security fixes and a weekly digest in your channel. See Slack.
- Settings in git: one
.stackat.ymlper repository or for the whole organisation. See .stackat.yml.
Two apps#
| App | Reads | Writes | For |
|---|---|---|---|
| Stackpaw | Your repositories | Issues and pull requests | Most teams |
| Stackpaw Audit | Your repositories (code read-only) | Issues only | Teams whose policy forbids a bot changing code |
Both scan the same way and open the same issues. Only Stackpaw can open pull requests.
Start here#
Getting startedInstall Stackpaw or Stackpaw Audit, what happens in the first hour, the 14-day trial and the free plan's repository.Plans and billingThe 14-day trial, the free plan's limits, Team pricing, how invoicing works and what happens when you leave.How issues workWhat Stackat finds, how an issue is laid out, the verdicts and the high, medium and low risk scale, Next up, and when issues close.Pull requestsAutomatic pull requests with auto_pr, one on request with /stackpaw pr, ready versus draft, what gets bumped and when they close.CommandsEvery /stackpaw command you can reply with on a Stackat issue, who may use them by default, and how to limit them with commands in .stackat.yml.SlackConnect a Slack channel with Add to Slack, what Stackat posts there, the weekly digest with a sample, and the incoming-webhook fallback.DashboardThe customer dashboard at app.stackat.dev: Overview with Next up, Inventory, Audit evidence with its date range and CSV, Settings, and how fresh the data is.OverviewConfigure Stackat in git with .stackat.yml, per repository or for the whole organisation: where the file lives, how the two merge, invalid files, and a complete example.Security and dataWhat the Stackpaw apps can do, what Stackat reads and keeps, and where the full security, data and privacy pages are.TroubleshootingWhat to check when there are no issues, a tool is pinned to latest, settings are not applied, a command is refused or Slack stays quiet.