Features
- Scan for TODO comments in your codebase
- Scan for security issues
- Scan for performance issues
- Scan for technical debt
- Scan for refactoring opportunities
- Automatically fix failed CI/CD pipelines
- Respond to MR comments and review feedback
Installation
1
Install
Navigate to the Integrations page in Tembo and click the
Install button next to GitLab.2
Authorize
Authorize Tembo to access your GitLab account. You can select specific repositories or all repositories. You’ll be redirected back to the Integrations page when complete.
3
Activate Repositories
After syncing completes (may take a few minutes), select which repositories you want Tembo to scan under “Active Repositories” on the Integrations page.Only repositories you activate here will be scanned for issues and receive improvement merge requests.Tip: If repositories don’t appear after a few minutes, use the sync button on the Integrations page to manually trigger a refresh.
Managing Your Integration
Manual Sync
If you’ve added new repositories to your GitLab account or modified repository permissions, you can manually sync to refresh the list:- Navigate to the Integrations page
- Find the GitLab integration card
- Click the sync button (circular arrow icon)
- Wait for the sync to complete - the button will show a loading indicator while syncing
Supported Webhooks
Tembo listens to the following GitLab events and maps them to automation triggers (reference them asgitlab.<event> in your triggerName, e.g., gitlab.merge_request.opened). Tembo subscribes only to the events listed here (not every GitLab webhook). The Integrations page in the app shows the live set enabled for your org. If you need an additional event, contact support@tembo.io.
merge_request.openedmerge_request.updatedmerge_request.closedmerge_request.mergednote.created(for comments on merge requests)
Usage
Automated Scanning
Once activated, Tembo automatically scans for TODO comments, security issues, performance problems, technical debt, and code quality issues.Merge Requests
When Tembo finds an addressable issue, it creates a merge request with the proposed fix, detailed description, and assigns it for team review.Working with Merge Requests
Reviewing Merge Requests
Review Tembo’s MRs just like any other team member’s work:- Examine the changes and verify they align with your requirements
- Leave comments directly on the code if you need changes
- Use the Feedback Loop feature to have Tembo address your review comments automatically
Commenting on MRs
When reviewing Tembo’s merge requests, you can request changes or improvements by tagging@tembo in your comments. This ensures Tembo responds to your specific feedback while ignoring internal team discussions or comments directed at other team members.
Example:
@tembo tag, Tembo will not respond to the comment, allowing for cleaner team communication.
Failed Pipeline Detection
Tembo automatically monitors your GitLab CI/CD pipelines and detects when they fail. When a pipeline fails due to broken tests, linting errors, or other issues, Tembo will analyze the failure, identify the root cause, and create an MR with a fix. This helps maintain a healthy CI/CD pipeline without manual intervention.Troubleshooting
Repositories Not Appearing After Installation
If repositories don’t appear in the “Active Repositories” list after installation:- Wait a few minutes - Initial sync can take 2-5 minutes depending on the number of repositories
- Check repository permissions - Ensure you granted Tembo access to the repositories during installation
- Manual sync - Click the sync button on the GitLab integration card to refresh the repository list
- Verify group access - If repositories belong to a GitLab group, ensure you have permission to install GitLab Apps for that group
Tembo Not Responding to @tembo Mentions
If Tembo doesn’t respond when you mention@tembo in merge request comments:
- Check the mention format - Ensure you’re using
@tembo(not variations like@Temboor@TEMBO) - Verify repository activation - Confirm the repository is activated in the Integrations page
- Check webhook status - The Integrations page shows the live set of enabled webhooks; ensure
note.createdis enabled - Review permissions - Verify Tembo has the necessary permissions to read merge requests and comments
Merge Requests Not Being Created
If Tembo isn’t creating MRs for detected issues:- Verify repository activation - Only activated repositories receive automated scanning
- Check branch protection - Ensure Tembo has permission to create branches and open merge requests
- Review scanning settings - Confirm automated scanning is enabled for your organization
- Check for existing MRs - Tembo may not create duplicate MRs for issues already addressed
Best Practices
- Configure repository settings to match your team’s preferences
- Use Rule Files to help Tembo understand your coding standards
- Set up Hooks to customize Tembo’s behavior for your workflow