Who it is forAn engineering lead tired of prompt edits silently breaking production behaviour.
The problemPrompt and model changes ship without tests, so regressions show up as user complaints.
The outcomeA pipeline that runs your evals on every change and flags LLM security issues in pull requests.
What you need first
- Node.js for npm, or Homebrew, or pip; npx works without installing
- API keys for the LLM providers you test, set as environment variables
- Only run red teaming against apps you own or are authorised to test
Steps
- Write your eval config locally and confirm
promptfoo evalpasses - Add Promptfoo to your pipeline as the CI/CD integration docs describe
- Turn on code scanning to review pull requests for LLM-related security and compliance issues
- Share results with your team from the viewer
- Use caching to keep repeated runs fast
Prompt for your agent
Add promptfoo/promptfoo to my <CI system> so every pull request runs `promptfoo eval` on <config> and fails if any test fails. Also set up code scanning for LLM security issues and show me the workflow file.
Caveat. CI runs call real model APIs, so budget for the cost per run and cache where you can.
Use this in your AI agent
Ask your agent
Using the Deduped MCP, get the setup steps for promptfoo/promptfoo and "Block prompt regressions in CI"
Add Deduped to Claude Code once
claude mcp add --transport http deduped https://dedupedai.com/mcp
Every Monday: the 5 hottest repos and exactly how to use them. Free, one email a week, unsubscribe anytime.
Get them freeShare: X LinkedIn Hacker News Email Copy link
Third-party repos we don't own. AI-written use cases can be wrong. Disclaimer