Apache 2.0 · v0.1.0·Bring your own model key

Pull request review,
without the noise.

Vigil is a quiet, keyboard-driven desktop app that triages your PR queue, surfaces silent regressions, and reads diffs the way a senior reviewer would. Local-first. Open source. Yours to fork.

macOS 13+Linux (deb, rpm, AppImage)Windows 10+
Vigil — PR queue
By risk12 open
/ search
Fix race condition in token refreshGH12m
Migrate billing webhooks to v2 APIAZ1h
Add admin override for invoice voidingGH2h
Bump tailwind to 4.0GH3h
Refactor feature-flag SDK error handlingGH4h
Drop unused IAM policy for legacy importerAZ5h
Rewrite session middleware in TypeScriptGH7h
Add OpenTelemetry spans to webhook deliveryAZ9h
Patch CVE-2025-1041 in marked depGH11h
Enable WAL2 on analytics SQLiteGH14h
Cleanup: remove dead onboarding routesGH1d
Tighten S3 bucket policy for backupsAZ1d
live demo · press ? for shortcuts, j k to navigate
Why Vigil

Built for the era where most pull requests are written by something else.

01

Reads diffs by intent.

Beyond line changes — Vigil groups hunks by what they actually do. Renames, refactors, behavior changes, and dead code are surfaced separately, not buried under each other.

02

Catches silent regressions.

A removed guard. A widened policy. A switch from explicit error to silent fallback. The kind of changes that pass tests and break customers — flagged before merge.

03

AI-aware.

Pull requests authored by Claude, Copilot, Cursor, or your own agents are marked and reviewed with extra scrutiny on the patterns those tools tend to get wrong.

Four lenses

Every PR, viewed four ways. Same shell, different question.

A single page that summarizes intent, blast radius, and what to focus on first.

#408 · Migrate billing webhooks to v2 API · Overview
FILES CHANGED
14+2
LINES ADDED
312+47
RISK SCORE
med
Summary

Migrates billing webhooks to the v2 signing protocol. Main risk: the retry queue now re-attempts on 5xx but not on signature mismatch — silent failure path if the key rotates mid-delivery.

Worth your attention
Retry logic skips signature errors — could silently drop webhooks
Signing key sourced from env at startup, not per-request
Test coverage for v1 path removed; v2 path not yet covered
Keyboard-first

Hands stay on the keyboard. Eyes stay on the diff.

Vigil is built around a single rule: any task that you'd do more than twice a day has a single-key shortcut. Click only when there's nothing faster to do.

?anywhere in the app, anytime
Navigate
jk
Move through the queue
Open the selected PR
gr
Re-run review
/
Focus search
Act
m
Mark approved
c
Add a comment
s
Snooze until later
x
Close or dismiss
Overlay
?
Show all shortcuts
Esc
Dismiss any overlay
k
Open command palette
,
Open settings
Plug in what you already use

Bring your own keys. Your code and prompts never leave your machine except to the providers you authorize.

GH
GitHub
github.com & GHES
AZ
Azure DevOps
cloud & on-prem
AN
Anthropic
Claude Sonnet / Opus
OA
OpenAI
GPT-4 family
OL
Ollama
fully local
··
Custom
any OpenAI-compat
Open source

Read the source. Fork the prompts.
Run it on your own laptop.

Vigil is a single static binary. The review prompts live in a folder of plain Markdown files — read them, tweak them, contribute new lenses upstream. There is no SaaS to lock you in.

Self-host the review backend, or run everything against Ollama for a fully local setup. The choice is yours, on every PR.

0
stars
1
contributors
Apache 2
license
0
telemetry by default

Latest release · v0.1.0
  • +Architecture drift lens
  • +Ollama provider, fully local mode
  • +Azure DevOps on-prem support
  • ~Faster initial sync (~3× on large repos)

“The first review tool that actually felt like it was on my side. It tells me what changed and what to worry about — then it gets out of the way.”

Eitan Reuven
Staff Engineer · early contributor
Install

One command. No account. No sign-up.

~/$ install
# Homebrew cask — coming soon
 
# Until then, build from source or grab
# the source archive from GitHub Releases.

Your PR queue, on your terms.

Free, forever. No accounts. No telemetry. Just a binary and a folder of prompts you can read.