
What the review includes
- Change analysis: flags NULL risks, type mismatches, and join changes that could alter row counts
- Performance & cost: SQL anti-pattern detection (SELECT *, cross joins, missing filters on large tables) with volume context
- Downstream blast radius: which models, pipelines, and dashboards depend on what’s changing, including column-level impact for renamed or removed columns
- Tests & incidents: pass/fail history for each changed model, active data quality incidents, and coverage gaps on new columns
- Risk summary: a plain-language assessment of whether it’s safe to merge, with prioritized recommendations
How it works
When a PR is opened or updated:- A CI job sends the repository name and branch to Elementary’s API
- Elementary fetches the diff, runs static SQL analysis, and queries live data quality context for the changed models
- A structured Markdown comment is posted on the PR or MR
Setup
Prerequisites
- An Elementary Cloud account with a code repository connected
- An Elementary API key
GitHub Actions
Add a repository secret
Go to Settings > Secrets and variables > Actions in your GitHub repository and add:
The review only runs on PRs that touch model files. Other PRs are ignored.
| Secret | Required | Description |
|---|---|---|
elementary_api_key | Yes | Your Elementary Cloud API key |
elementary_env_id | No | Your Elementary environment ID. Only needed when the repository is connected to multiple environments. |
Optional: specify environment
Optional: specify environment
If your repository is connected to multiple Elementary environments, add The environment ID is the UUID in your Elementary Cloud URL. For example, in
env-id to specify which one to use:https://app.elementary-data.com/169e9308-9a70-4200-b810-ad486cb42f3a/report/dashboard, the environment ID is 169e9308-9a70-4200-b810-ad486cb42f3a.If you don’t specify an env-id and the repository is connected to only one environment, it will be selected automatically. If connected to multiple, the review will return an error listing the available environment IDs.GitLab CI
Add CI/CD variables
Go to Settings > CI/CD > Variables and add:
To post the MR comment, the template uses one of two authentication methods:
| Variable | Masked | Required | Description |
|---|---|---|---|
elementary_api_key | Yes | Yes | Your Elementary Cloud API key |
elementary_env_id | Yes | No | Your Elementary environment ID. Only needed when the repository is connected to multiple environments. |
gitlab_api_token | Yes | No | Project Access Token with api scope. Only needed if you cannot enable CI/CD job token access (see below). |
CI_JOB_TOKEN(default): GitLab’s built-in job token, available automatically in every pipeline. Requires a project admin to enable Settings > CI/CD > Token Access > Allow CI/CD job tokens to access this project’s API.GITLAB_API_TOKEN(alternative): If this variable is set, it takes priority overCI_JOB_TOKEN. Use a Project Access Token withapiscope. This works without any admin settings change and is the easier option if you don’t have project admin access.

Troubleshooting
No comment appears after the job runs Make surecontents: read, pull-requests: write, and issues: write are set under permissions in the workflow. An explicit permissions block sets any unlisted scope to none, so omitting a required scope causes the step to fail silently.
The review says the repository is not connected
Go to Settings > Environments in Elementary Cloud and verify your repository is connected.
The review says the repository is connected to multiple environments
Add elementary-env-id to your workflow. The error message lists the available environment IDs.

