Pullwatch

Pull requests, tags and outdated dependencies, watched from your Mac's menu bar.

Website     Download     Documentation     Changelog

Pullwatch is a menu bar app for macOS. It tells you about new pull requests, tags and releases on GitHub, Azure DevOps, GitLab™, Bitbucket, Codeberg, Forgejo and Gitea, keeps a searchable history, and checks your repositories for outdated runtimes, packages and known vulnerabilities. It speaks English, Dutch, German and French.

What it does

• Pull requests: a notification for each new or merged pull request (or merge request), with its CI checks as 4/8 and whether it waits in a merge queue or merge train.
• Tags and releases: new tags and the releases of GitHub, GitLab, Codeberg, Forgejo and Gitea, per repository, with who made them.
• History and statistics: every pull request and tag in a searchable list, and charts of opened and merged pull requests per author and repository.
• Repositories: every repository you follow, worst first, with a page per repository for its pull requests, versions, dependencies and security.
• Dependencies: outdated runtimes, frameworks and packages from your manifests and lockfiles, and what holds each update back.
• Packages: what your repositories publish to their own registry, and who uses it; your own packages are checked against that registry.
• Vulnerabilities: known advisories from OSV.dev and the GitHub Advisory Database, plus the code scanning, secret scanning and Advanced Security alerts of GitHub and Azure DevOps.
• Notifications with buttons to mark as read, open the repository or mute it, quiet hours, and a switch per kind.
• Agents via MCP: Claude Code, Codex, Cursor or VS Code ask Pullwatch about your pull requests, repositories and vulnerabilities, read-only and off by default (Agents).

Supported services

Service	Pull requests	Tags	Releases	Checks	Security data
GitHub (github.com)	Yes	Yes	Yes	Yes	Repository advisories, code scanning, secret scanning
GitHub Enterprise Server and GHE.com	Yes	Yes	Yes	Yes	Code scanning, secret scanning; advisories where the server has them
Azure DevOps	Yes	Yes	No	Yes	Advanced Security alerts
GitLab (gitlab.com and self-managed)	Yes	Yes	Yes	Yes	None; packages are checked with OSV.dev
Bitbucket Cloud (bitbucket.org)	Yes	Yes	No (Bitbucket has none)	Yes (build statuses)	None; packages are checked with OSV.dev
Codeberg, Forgejo and Gitea (codeberg.org, gitea.com and your own server)	Yes	Yes	Yes	Yes (commit statuses)	None; packages are checked with OSV.dev

The dependency and vulnerability check works on every service. See Add your accounts for the details of each.

Install

1. Download the latest Pullwatch-x.y.z.dmg from Releases.
2. Open it and drag Pullwatch to Applications.

Pullwatch needs macOS 26.6 or later and runs natively on Apple silicon and Intel. Every release is signed with a Developer ID and notarized by Apple, and Pullwatch updates itself through Sparkle. More in Install and first launch.

Getting started

1. Open Pullwatch. A welcome window points out its menu bar icon.
2. Add an account: Sign In with GitHub, a personal access token, or the gh, az or glab command-line tool.
3. Choose per repository what to follow: PRs, Tags and Completed (merged pull requests), each with its own bell.
4. Allow notifications. Pullwatch then polls in the background.

The documentation covers every screen, the token permissions and the keyboard shortcuts.

Privacy

• Pullwatch only reads. It never comments, merges or pushes.
• Tokens stay in the macOS Keychain, or with the gh, az or glab tool you signed in with. There is no Pullwatch server and no analytics.
• Settings, Sources lists every outside connection, and each data source can be switched off.

Read Privacy and sources for what is sent where.

Build from source

You need Xcode 27 (Swift 6.4) on macOS 26.6 or later.

git clone https://github.com/alessandro823/pullwatch.git
cd pullwatch
open Pullwatch/Pullwatch.xcodeproj   # run the Pullwatch scheme with ⌘R

The tests, as CI runs them:

export DEVELOPER_DIR=/Applications/Xcode.app/Contents/Developer
swift test --package-path PullwatchKit -Xswiftc -warnings-as-errors
xcodebuild test -project Pullwatch/Pullwatch.xcodeproj -scheme Pullwatch \
  -destination 'platform=macOS'     # unit and UI tests

[!NOTE] The UI tests take over the screen. On a Mac you are working on, run -only-testing:PullwatchTests and let CI run the UI tests.

scripts/release/release.sh --unsigned makes an ad hoc signed disk image in dist/. Signing, the release lane and the repository layout are in For maintainers and docs/releasing.md; the MCP server for agents in docs/mcp.md.

Contributing

Bug reports and ideas are welcome as issues. A pull request explains what changed and why, passes the checks in CLAUDE.md (the project's working notes: layout, gates and rules), and adds a changelog fragment as changelog.d/README.md describes.

Contributing     Security     Support     AI policy     Code of conduct

License

Pullwatch is licensed under the Apache License 2.0.

Trademarks and third-party

• The pull request, checks and menu bar icons and the glyph of the app icon are GitHub Octicons, MIT License.
• GitHub and the Invertocat are trademarks of GitHub, Inc. Pullwatch shows the unmodified Invertocat from GitHub's logo download where an account connects to GitHub.
• GITLAB is a trademark of GitLab Inc. in the United States and other countries and regions. Pullwatch shows GitLab's logomark, unmodified, from GitLab's press kit (gitlab-logo-500-rgb.svg) where an account connects to GitLab.
• Bitbucket and Atlassian are trademarks of Atlassian. Pullwatch shows the unmodified Bitbucket icon from Atlassian's logo component where an account connects to Bitbucket.
• The Codeberg logo is from Codeberg/Design, CC0; Codeberg is a trademark of Codeberg e.V. The Forgejo logo is by Caesar Schinas, from forgejo/meta, CC BY-SA 4.0. Gitea and its logo are trademarks of their owners; Pullwatch shows the unmodified logo from the Gitea repository where an account connects to Gitea.
• Azure DevOps is a trademark of the Microsoft group of companies. Pullwatch shows only the name, with an SF Symbol (a cloud).
• Pullwatch is not affiliated with, endorsed, sponsored or approved by GitHub, GitLab Inc., Atlassian, Microsoft, Codeberg e.V., the Forgejo project, CommitGo, Inc. or the Gitea project.

NOTICE holds the full notices, including the MCP Swift SDK and its dependencies.