0xpolygon/codegenie review

High-signal AI code review on pull requests, with a live status comment that becomes the final report.

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Activelast commit Aug 18, 2026
License
MIT

Pinned Snippet

workflow.ymlSHA-pinned
uses: 0xpolygon/codegenie@e0c4ddad53c821f3dad4fdb95eba585bdf6a47fc # v0.5.5

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
trigger-phraseComment text that triggers a review on the issue_comment lane (matched exactly, never interpreted).codegenie review
on-pull-requestRun automatically on pull_request opened/synchronize/ready_for_review events (true/false).true
allowed-associationsComma-separated author associations allowed to trigger (payload check; a live write-permission check also applies).OWNER,MEMBER,COLLABORATOR
allowed-usersComma-separated logins allowed to trigger regardless of association. Widening this is a deliberate security decision.""
post-inline-commentsAlso post inline finding comments as a PR review (true/false). The status-comment report posts either way.true
depthReview depth: light, normal, or deep.""
lensesComma-separated review lenses to enable.""
modelModel spec: provider/model[:reasoning], e.g. anthropic/claude-opus-5:xhigh. Reasoning defaults to high.""
llm-api-keyGeneric LLM API key, routed to the provider named in `model`. Provider-native env vars (ANTHROPIC_API_KEY, OPENAI_API_KEY, ...) also work and take precedence.""
max-timeOverride review.maxTime in minutes for this run.""
budget-boostScale per-packet review budgets by this factor.""
github-tokenToken used for PR metadata, the status comment, and inline posting.${{ github.token }}
bot-loginExact comment-author login when using a custom GitHub App token (e.g. my-app[bot]). Defaults to /user lookup for PATs, else github-actions[bot].""
preflight-onlyOnly evaluate the authoritative trigger/live-permission gate and set should-run/pr-number outputs. Use this in a job before the cancellable review job.false
namedescription
should-runWhether the authoritative trigger and live-permission gate authorized this event.
pr-numberPull request number resolved by an authorized preflight.