Skip to main content

Free · Apache-2.0 · any repository, any CI

Gate every pull request without a line meter or a quota.

Some code scanners price by lines of code, keep pull request analysis for paid editions, or count each PR check against a free quota. Skylos is Apache-2.0: run its gate on any repository, in any CI, on any branch. No seats, no quota, no account.

  1. 01 · Install

    Or uv tool install skylos.

  2. 02 · Write the gate

    Writes .github/workflows/skylos.yml: a check on the lines each pull request changes, plus a Skylos Done job when it finds a pytest project or a test_command. --no-upload keeps it CLI-only, with no API key or secret.

  3. 03 · Make it required

    Commit the file, open a pull request, then mark the Skylos check as required for your main branch. Your first gated pull request walks through it.

Work with the founder

For teams of 10–200 engineers: 8 weeks free, set up as a required check with you.

Where other tools draw the paid line

These tools do a lot that Skylos doesn't. This is only where their free use stops, in their own words.

SonarQube Cloud
  • Free plan: “Only main branch analysis”; pull request analysis “Only if the target branch is the main branch”; private projects up to 50k lines of code.
  • Paid plans: “You pay upfront for a maximum number of private lines of code to be analyzed in your organization.”

SonarQube Cloud subscription plansSonar plans and pricing

SonarQube Server
  • Developer Edition “Adds branch/PR analysis … on top of SonarQube Community Build”.
  • Developer, Enterprise and Data Center are “priced per instance, per year, based on your lines of code (LOC)”.

SonarQube Server editionsSonar plans and pricing

CodeQL
  • The CodeQL CLI licence doesn't allow use “in connection with any codebase that is not an Open Source Codebase (e.g., code in a private repo in GitHub)” unless you have “a paid customer license for GitHub Advanced Security”.
  • Code scanning alerts are dismissed in GitHub. Acting on in-code comments takes a separate action (advanced-security/dismiss-alerts), and the request for native inline suppression is open.

CodeQL CLI licenceResolving code scanning alertsadvanced-security/dismiss-alertsgithub/codeql#11427

Snyk
  • Free plan: 5 projects and 100 Snyk Code tests a month. Test limits apply to private repositories, and a pull request check is one of the things Snyk counts as a test.

Snyk plansWhat counts as a test?

Checked against each vendor's own pages on 12 October 2026. Prices and plans change; follow the links for today's terms.

What you get with Skylos

  • An Apache-2.0 CLI and gate: any repository, any CI, any branch, any laptop.
  • No line meter, no seats, no quota and no account.
  • Suppressions live in the code, next to the line, so a reviewer sees each one in the diff. In JavaScript and TypeScript, use the same text after //.
  • cicd init writes GitHub Actions. On GitLab CI, CircleCI or Jenkins, run the same CLI as a gate: CI/CD docs.
Suppress one rule on one line, or a whole block
path = settings.REPORT_PATH
data = open(path).read()  # skylos: ignore[SKY-D215] fixed path

# skylos: ignore-start
legacy_export(data)
# skylos: ignore-end

Keep your AI reviewer and your SAST.

Skylos is the deterministic required check: the same verdict every time, with no model deciding.

Rolling it out across a team of 10–200 engineers? The founder can set it up as a required check with you, free for 8 weeks.

Work with the founder