Push your repository's code graph to Dstl8 from GitHub Actions, so incidents and log patterns link straight to the code that emits them.

The action installs a checksum-verified release of the dstl8 CLI and runs dstl8 graph push. Only metadata leaves the runner (file paths, service names, log format strings, symbols and call edges), never source code. Use dry-run to see every byte that would be sent.

By default the action never fails your build: any problem becomes a workflow warning. Set fail-on-error: "true" to change that.

1. In Dstl8, create an API token: Org Settings → API Tokens.
2. In your GitHub repo (or org), add:
   • secret DSTL8_API_TOKEN: the token
   • variable DSTL8_API_URL: your org's API URL, e.g. https://acme.app.dstl8.ai
3. Add .github/workflows/dstl8-codegraph.yml:

name: dstl8 code graph
on:
  push:
    branches: [main]        # default branch only; other branches are skipped
  schedule:
    - cron: "17 6 * * 1"    # weekly refresh keeps quiet repos current
  workflow_dispatch:

permissions:
  contents: read

jobs:
  codegraph:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v5
        with:
          fetch-depth: 50    # history to diff against the previous push
      - uses: control-theory/dstl8-codegraph-action@v1
        with:
          api-url: ${{ vars.DSTL8_API_URL }}
          token: ${{ secrets.DSTL8_API_TOKEN }}

The API URL is your org's Dstl8 API address, https://<org>.app.dstl8.ai. A wrong host returns an HTML 404, not an auth error, so check it first if pushes fail.

skipped means there was nothing to do: either the server already has this exact graph, or the branch is not the repository's default branch.

• Runners: Linux and macOS, x86-64 and arm64. Windows runners are not supported.
• Default branch only. Dstl8 tracks the default branch; pushes from other branches are skipped, so a pull-request trigger is harmless but useless.
• Audit first: run once with dry-run: "true" and upload artifact-path with actions/upload-artifact to review exactly what would be sent.
• Tuning what is indexed: .dstl8.yaml (service mapping) and .dstl8ignore (gitignore syntax) in the repo root. See the code graph docs.
• Pinning: @v1 follows compatible releases. For maximum supply-chain safety, pin a full commit SHA and set version.

Any CI can run the CLI directly:

curl -fsSL https://install.dstl8.ai/script/dstl8-cli | sh
DSTL8_API_URL=https://acme.app.dstl8.ai DSTL8_API_TOKEN=$TOKEN dstl8 graph push

MIT