intrect-io/OpenSwarm Review
Run the OpenSwarm agentic review gate over a pull request diff
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| path | Directory holding the checkout to review, relative to the workspace. Defaults to the workspace root. Set this when the reviewed code and the action's own code are checked out to separate paths — which is the safe arrangement for reviewing pull requests. | no | "" |
| base | Git ref or commit to diff against. Defaults to the merge base of the PR head and its base branch. A checked-out PR branch has no dirty working tree, only commits ahead of its base, so the gate must review the committed diff rather than working-tree changes. | no | "" |
| adapter | Adapter override (openrouter, atlascloud, codex-responses, ...). Pass one explicitly on a hosted runner: with no OpenSwarm config present the CLI falls back to its `codex` default, so exporting another provider's key is not by itself enough to select that provider. | no | "" |
| model | Optional model override for the reviewer. Set this explicitly when a CI workflow needs a bounded-cost model instead of the configured default. | no | "" |
| read-only | Deny the reviewer every mutating tool, including bash. Default true, and it should stay true for anything triggered by a pull request: the reviewer reads attacker-authored files with the provider credential in the environment, so a shell is an exfiltration path. Adapters that cannot enforce read-only refuse to run rather than silently ignoring this. | no | true |
| version | Version of @intrect/openswarm to install. | no | latest |
| sarif-file | Where to write the SARIF report. Relative paths are resolved against the runner temp directory, not the checkout — a report written inside the reviewed tree would itself show up as a changed file. Uploading it is left to the caller: that step needs `security-events: write`, which a composite action cannot grant itself. | no | openswarm-review.sarif |
| fail-on-gate-not-run | Whether a gate that never produced a verdict (quota exhausted, adapter down) fails the job. Default true: a review that did not happen must not read as a pass. Set false only if a separate alert covers it. | no | true |
Outputs
| name | description |
|---|---|
| decision | approve | revise | reject — empty when the gate did not run. |
| gate-ran | true when a verdict was produced, false when the gate could not run. |
| sarif-file | Absolute path to the SARIF report, when one was written. |