Configuration

Warden is configured with warden.toml in your repository root. This reference covers warden.toml only. GitHub Actions workflow settings live under GitHub Workflow.

warden.toml

version = 1

[[skills]]
name = "security-review"

[[skills.triggers]]
type = "pull_request"
actions = ["opened", "synchronize"]

[[skills]]
name = "code-review"

[[skills.triggers]]
type = "pull_request"
actions = ["opened", "synchronize"]

Sections

Skill EntriesSkill fields, filters, remotes, and model overrides.Models and RuntimesPi selectors, Claude runtime, model lanes, and precedence.TriggersPull request, local, and schedule trigger settings.Output and DefaultsFailure thresholds, report thresholds, and defaults.RunnerRun-level concurrency for CLI and action executions.ChunkingControl whether Warden analyzes hunks, whole files, or skips files.

Environment Variables

WARDEN_MODELstring

Fallback model selector when warden.toml and —model do not set one. See Models and Runtimes.

WARDEN_OPENAI_API_KEYsecret

OpenAI API key when using an OpenAI Pi model.

WARDEN_ANTHROPIC_API_KEYsecret

Anthropic API key when using an Anthropic Pi model or the Claude runtime.

WARDEN_SKILL_CACHE_TTLduration

Cache duration for unpinned remote skills. Default: 24h.