javedquadri/AI Code Review

AI-powered PR review with strict security, quality, and performance gate

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Activelast commit Jul 1, 2026
License
None

Pinned Snippet

workflow.ymlSHA-pinned
uses: javedquadri/code-review@6b944cb7373fc83a45e012d554411c54c5a01fd8 # v1.1.1

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
gemini_api_keyGemini API Key from Google AI Studioyes
deepseek_api_keyDeepSeek API Key used only if Gemini failsno""
modelPrimary Gemini modelnogemini-3.5-flash
fallback_gemini_modelFallback Gemini model used only if primary Gemini failsnogemini-2.5-flash
deepseek_modelDeepSeek model used only if Gemini fallbacks failnodeepseek-v4-flash
tech_stackTech stack summary. Leave blank for lightweight AI detection from diff.no""
max_changed_linesMaximum changed lines allowed for AI review. Oversized PRs fail instead of being partially reviewed.no2500
max_changed_filesMaximum changed files allowed for AI review. Oversized PRs fail instead of being partially reviewed.no50
max_patch_bytesMaximum compact patch bytes sent to the model. Oversized compact patches fail instead of being truncated.no160000
fail_on_cautionWhether CAUTION verdict should fail the check. Recommended false to block only serious findings.nofalse

no outputs