| commit-sha | Commit SHA to review. Caller must have run actions/checkout with fetch-depth: 0. | yes | — |
| anthropic-api-key | Anthropic API key. Provider runs only when set. | no | "" |
| openai-api-key | OpenAI API key. Provider runs only when set. | no | "" |
| gemini-api-key | Gemini API key. Provider runs only when set. | no | "" |
| claude-auth | Claude provider auth mode: auto, api, or cli. auto uses claude-code-oauth-token when set, otherwise anthropic-api-key. | no | auto |
| openai-auth | OpenAI provider auth mode: auto, api, or cli. auto uses Codex CLI auth when codex-access-token or codex-auth-json is set, otherwise openai-api-key. | no | auto |
| claude-code-oauth-token | Claude Code OAuth token from `claude setup-token`. Enables Claude CLI mode in auto auth. | no | "" |
| codex-access-token | Codex access token for CODEX_ACCESS_TOKEN. Enables Codex CLI mode in auto auth. | no | "" |
| codex-auth-json | Optional contents of a Codex auth.json file for Codex CLI mode. Use only on trusted private runners. | no | "" |
| codex-home | Optional CODEX_HOME path for Codex CLI mode. Useful for self-hosted runners with persistent Codex auth. | no | "" |
| install-cli-tools | Install missing Claude Code or Codex CLI tools when a CLI mode is selected. | no | true |
| claude-cli-path | Claude Code CLI command path used in Claude CLI mode. | no | claude |
| codex-cli-path | Codex CLI command path used in OpenAI CLI mode. | no | codex |
| codex-sandbox | Codex sandbox mode used in OpenAI CLI mode. GitHub-hosted runners may require danger-full-access because Codex read-only sandboxing depends on Linux user namespaces. | no | danger-full-access |
| claude-model | Anthropic model id. | no | claude-opus-4-8 |
| openai-model | OpenAI model id. | no | gpt-5.5 |
| gemini-model | Gemini model id. | no | gemini-3.5-flash |
| claude-context-file | Project context file injected into the Claude prompt. Empty disables. | no | "" |
| openai-context-file | Project context file injected into the OpenAI prompt. Empty disables. | no | "" |
| gemini-context-file | Project context file injected into the Gemini prompt. Empty disables. | no | "" |
| prompt-file | Path to a custom prompt template, relative to the workspace. Overrides the bundled generic prompt. Useful for project-specific reviewer rules. | no | "" |
| exclude-paths | Newline-separated git pathspecs excluded from the diff. Each line passed verbatim to git diff. Use the :!path syntax. | no | "" |
| max-diff-lines | Skip review if filtered diff exceeds this many added/changed lines. | no | 5000 |
| skip-message-patterns | Newline-separated bash glob patterns matched against the commit subject. If any matches, the commit is skipped. | no | Merge*
|
| skip-author-patterns | Newline-separated bash glob patterns matched against the commit author name. If any matches, the commit is skipped. | no | "" |
| min-severity-for-issue | Lowest severity that triggers issue creation. One of: critical, warning, info. | no | warning |
| min-models-for-fix-pr | Number of providers that must agree on a high-confidence fix before a draft fix PR is opened. Set to 0 to disable fix PRs. | no | 2 |
| issue-label | Label applied to created issues. Created on demand. | no | ai-review |
| issue-title-prefix | Prefix used in issue titles. The short SHA is appended. | no | [AI Review] |
| fix-pr-title-prefix | Prefix used in fix PR titles. The short SHA is appended. | no | [AI Fix] Suggested fixes for |
| fix-branch-prefix | Branch prefix for fix PRs. Short SHA is appended. | no | ai-fix/ |
| base-branch | Base branch fix PRs target. | no | main |
| github-token | Token used to create issues, comments, branches, and PRs. | no | ${{ github.token }} |
| node-version | Node.js version used to run the review script. | no | 20 |