Pullfrog runs Claude Code for Anthropic models and OpenCode for every other provider, with an experimental Codex CLI harness for organizations that opt in (model resolution). Copilot also offers Claude and Codex as agents to Copilot Pro+ and Enterprise customers, in public preview since February 2026.
Models and credentials
Anthropic’s claude-code-action runs Claude, Codex runs OpenAI models, Google’s run-gemini-cli runs Gemini, and Copilot cloud agent picks from GitHub’s model list. Pullfrog runs any major provider, and each account chooses how to pay:- Your own API key, including Amazon Bedrock, Google Vertex AI, Azure OpenAI, and OpenAI-compatible endpoints
- A Claude, ChatGPT, Grok, or Kimi Code subscription you already pay for
- Pullfrog Router, one prepaid balance across providers at provider cost with no markup
- Free models, with no bill at all
Triggers
Each automation is a toggle in the repo console. The vendor actions express the same events as workflow filters in YAML, which you write and maintain in each repository.
Editing a mention cancels its run and starts a new one with the new text. For a schedule, use the headless action with GitHub’s own
on: schedule trigger.
PR review
Pullfrog re-reviews a PR as new commits land, and closes out its own findings once they are fixed.- A re-review reads a
git range-diffagainst the last reviewed commit, so its feedback covers only what changed. - Before it reviews, Pullfrog checks its own open findings, replies “Addressed in” with the commit, and resolves each thread the new commits fixed. Threads from human reviewers stay open for those reviewers.
- The reviewer can hand open questions to read-only specialist subagents, several in parallel.
- Fix all and Fix 👍s on a review turn its comments into a commit (address reviews).
- With auto-merge on, an approval hands the PR to GitHub’s native auto-merge, so branch protection still decides when it merges (auto-merge).
Tools built for CI
An agent in CI needs more than the GitHub API. Pullfrog ships these tools in the action, already authenticated:
See Tools for the full list.
Context between runs
Each review updates a PR-level snapshot that the next review of that PR reads first. Repo-level learnings collect durable facts about the codebase, and you can edit them in the repo console (learnings).Hooks
The Hooks card in the repo console runs your scripts at fixed points in a run. They run in the same sandbox and scrubbed environment as the agent’s shell.
Shell and credential isolation
The agent has a real shell, git, and network access, but not your secrets. See Security for each layer.- Shell commands run in a Linux namespace sandbox. In Restricted mode, which is always on for public repositories and the default for private ones, a default-deny allowlist keeps secrets in the runner environment out of the shell.
- Git authenticates with a one-time code per operation, so the GitHub token never enters the agent’s environment.
- Review and plan runs cannot push or commit code.
- Pushes can be limited to feature branches, or turned off.
- Runs from non-collaborators are off by default. When you turn them on, those runs are always capped at Restricted.
Cross-repository runs
With the--xrepo flag, one run can read and change several repositories in your organization (cross-repo). Copilot cloud agent works in one repository per task.
Pricing and license
The action is open source under the MIT license at pullfrog/pullfrog. Personal accounts and public repositories run free, and private repositories in an organization take one flat monthly plan per organization, with no per-seat charge (billing). Active open source projects can apply for funded models.GitHub Copilot cloud agent
Copilot cloud agent is the closest alternative. It is built into github.com and supports MCP servers, hooks, custom agents, and automations that start sessions on events or a schedule.
Copilot is ahead on reach and first-party integration:
- Sessions start from GitHub, GitHub Mobile, IDEs, the GitHub CLI, the REST API, Jira, Slack, Microsoft Teams, Azure Boards, Linear, and Raycast. Pullfrog starts from GitHub and its console.
- Commits are authored by Copilot with the assigning developer as co-author, and workflows on its PRs wait for approval from a user with write access (risks and mitigations).
- Copilot code review can review every new PR and each new push, set by personal setting or ruleset, under the same subscription.
Feature matrix
When each option fits
- A vendor action fits when you use one vendor’s models, want an
@mentionor a review step, and are happy to own the workflow YAML for each event. - Copilot cloud agent fits when your team already pays for Copilot seats, starts work from IDEs, Slack, Jira, or Linear, and works in one repository per task.
- Pullfrog fits when you want the agent to react to PRs, reviews, issues, and CI failures without YAML, to choose models and credentials per account, to carry context across runs, or to accept restricted runs from outside contributors. Start with getting started.