Skip to content

Add AI review: Codex and GLM review every pull request #1

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We鈥檒l occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
poweruserz merged 1 commit into from
Oct 19, 2026
Merged

Add AI review: Codex and GLM review every pull request #1

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
29 changes: 29 additions & 0 deletions .github/workflows/ai-review.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,29 @@
name: AI review

# Codex and GLM review every pull request head, and a coordinator reports the result as commit status
# `ai-review`; see https://github.com/poweruserz/ai-review. Private repositories run on the review-only
# dreamfyre runners, public ones on GitHub-hosted runners, and fork pull requests are skipped.

on:
pull_request:
types: [opened, synchronize, reopened, ready_for_review]
issue_comment: # Codex's review-state comment wakes the coordinator; runs from the default branch only
types: [created, edited]

permissions:
contents: read
issues: write
pull-requests: write
statuses: write

jobs:
ai-review:
# Second gate next to the reusable workflow's own: other comments never start it.
if: github.event_name == 'pull_request' || github.event.comment.user.login == 'chatgpt-codex-connector[bot]'
# Tracks @main on purpose (owner's decision, 2026-10-19): the logic is maintained once for every repository.
# Only this account can push to poweruserz/ai-review, and it can already write here directly, so a SHA pin
# would cost one PR per repository per update without stopping a real attacker. Only two secrets go there.
uses: poweruserz/ai-review/.github/workflows/review.yml@main
secrets: # only these two, never `inherit`; CODEX_TRIGGER_PAT is set only where codex-fixes is on
ZAI_API_KEY: ${{ secrets.ZAI_API_KEY }}
CODEX_TRIGGER_PAT: ${{ secrets.CODEX_TRIGGER_PAT }}
Loading