Workflows
A workflow is a job you run against a repository. Each does one thing well, and most teams use several on a regular cadence. You start them from the web app. For what each plan includes — and how each run draws on your monthly credit — see Plans & pricing.
At a glance
| Workflow | What it does | You get | Plans |
|---|---|---|---|
| Full audit | The deepest audit — the complete ~39-tool catalog, including architecture analysis | Findings and suggestions | Every plan |
| Standard audit | A focused 24-tool audit across security, correctness, maintainability, performance, and dependencies | Findings and suggestions | Every plan |
| Discovery | Profiles your repo so every other workflow understands it; runs automatically on your first repo | Stored repo context | Every plan |
| Revalidate | Re-checks existing findings against the latest commit without generating new ones | Updated finding statuses | Every plan |
| PR review | Reviews incoming pull requests automatically | A PR comment + check run | Every plan |
| Fix | Fixes a specific finding and opens a pull request | A pull request | Every plan |
| Publish | Opens a pull request that writes your repo's context into the repo for AI coding tools | A pull request | Every plan |
Plan and access limits
- No workflow is withheld by plan. Every workflow above is available on every plan, including Free, and there is no per-month run count. What you spend is the credit your workspace holds: each run draws against it, and a bigger or deeper run draws more.
- Public repos are read-only. A public repository connected without installing the Hyrax GitHub App can run the workflows that don't write back: either audit depth, Discovery, and Revalidate. PR review runs too, but its results stay in the app — without the App, nothing can post to GitHub. To run Fix or Publish, install the App. See Public & private repositories.
See Plans & pricing for the full per-plan breakdown.
The audit comes in two depths — Standard (the everyday default) and Full. Audit depth covers what each depth runs and how the audit button and its level picker behave.
Full audit
The flagship, and the deepest sweep. A full audit runs the complete ~39-tool catalog — every category, including architecture analysis and the full operations set — and produces findings (concrete problems to fix, each with a priority, a category, and the exact file location) plus a handful of architectural suggestions worth considering. It's a deliberate action: you choose when to run it. See Audit tools & languages for what it covers and How Hyrax works for what happens during a run.
Available on every plan. You run it from the audit button's level picker — Audit depth covers the button behavior. It sits behind the picker rather than on the button itself because it is slower and costs more, so choosing it should be deliberate.
Standard audit
The everyday audit. It runs the same engine as the Full audit over a focused 24-tool subset — security, correctness, maintainability, performance, and dependencies — dropping the architecture group and most of operations. It produces the same kind of findings and suggestions as the full audit, just over a leaner set of concerns, which keeps each run cheaper. It's what the audit button runs by default (Audit depth).
Available on every plan.
Discovery
Profiles a repo — its architecture, conventions, and how-to knowledge — so audits and fixes on it are sharper, and so Publish can write that context back into your repo. See Discovery & AI agent context.
Discovery runs automatically on the first repository you connect, and on any public repository you add by URL. For repositories you add after that, run it yourself from the repo's Discovery tab — one click, and it's a prerequisite for auditing that repo. Re-run it after big changes. (Audits never start on their own: your first audit on a repo is always something you choose.)
Available on every plan.
Revalidate
Re-checks your existing findings against the current state of the repo and updates their status — without generating new findings. Use it to cheaply confirm that work resolved what it was supposed to, instead of paying for a full audit.
Available on every plan.
PR review
Reviews a pull request and posts a single review comment plus a Hyrax Review check run. You can require it for merge — see Pull request review for what that means for pull requests Hyrax skips. It is on by default for every repository you connect, and runs automatically on incoming pull requests; turn it off per repo in the repo's settings.
Available on every plan.
Fix
Fixes a specific finding and opens a pull request. The finding stays open until that pull request is merged. See Fixes.
Available on every plan.
Publish
Opens a pull request that writes your repo's discovered context into the repository, so AI coding tools — Claude Code, Cursor, Copilot — pick up your architecture and conventions automatically. See Discovery & AI agent context.
Available on every plan.
Where to go next
- How Hyrax works — what happens during a run
- Audit tools & languages — what an audit covers
- Findings & suggestions — reading and triaging results
- Fixes — how fixes ship as pull requests
- Plans & pricing — what each plan includes