Skip to content
Tandem

Code

The engineering team works on your code the way a contractor would: on branches, in pull requests, never on main directly. You merge.

Connect GitHub

Section titled “Connect GitHub”

During setup, or later from the workspace’s Code page, sign in with GitHub and install Tandem on the account or organization that owns the repositories. Then pick the repositories the team works on: each becomes a project in the workspace, and the first task can be an audit of them.

Tandem uses the installation’s own short-lived tokens, re-minted as they expire; no personal token of yours is stored. Each repository you pick becomes a project in the workspace with the repository as its workspace; the agents clone it, branch it and open pull requests against it with the installation’s token, delivered to the workspace as a sealed secret. Add or remove repositories on the Code page later; a workspace that is running takes the change on its next resume.

What the team does with it

Section titled “What the team does with it”
  • Reads the code to plan and to audit.
  • Opens pull requests for the pieces of work you accepted, one task at a time.
  • QA reviews every pull request before it reaches you; the Security Auditor files what it finds as work.
  • Nobody merges. A merged pull request is one you merged.