devsecops-appsec/AI Secure Code Review
Automated AppSec code review on PR changes using a ChatGPT-compatible API
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Maintainedlast commit Sep 17, 2025
- License
- MIT
Pinned Snippet
uses: devsecops-appsec/ai-secure-code-review-action@84de9c650686065acd0e7199da89b19247cf781c # v1.0.2tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| openai_api_key | API key for OpenAI or compatible provider | yes | — |
| model | Model name | no | gpt-4o-mini |
| max_tokens | Max output tokens | no | 1000 |
| time_budget_seconds | Time budget for analysis | no | 100 |
| max_files | Max changed files to review | no | 30 |
| max_lines | Max changed lines across files | no | 1200 |
| line_trim_per_file | Per-file hunk line cap | no | 300 |
| risky_exts | Comma-separated file extensions | no | js,ts,tsx,jsx,py,go,rb,php,java,kt,cs,rs,swift,c,cc,cpp,h,sql,sh,ps1,yml,yaml,json,html,htm,css,scss,vue,mdx,tf,tfvars,hcl |
| openai_base_url | Optional: alternate base URL (e.g., OpenRouter) | no | https://api.openai.com/v1 |
| openai_org | Optional: OpenAI org id header | no | "" |
Outputs
no outputs