one-code-llc/MergeRisk
Analyze pull-request merge risk with deterministic scoring and optional AI insights.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| github-token | GitHub token used to read pull requests and create or update report comments. | yes | ${{ github.token }} |
| provider | Optional AI provider: none, openai, openai-compatible, or anthropic. | no | none |
| base-url | Base URL for openai-compatible provider (e.g. https://api.groq.com/openai/v1). Required when provider is openai-compatible. | no | "" |
| model | Model name for AI synthesis. | no | "" |
| api-key | API key for the selected AI provider. | no | "" |
| fail-on-risk | Fail the workflow at this risk level: none, medium, high, or critical. | no | none |
| max-patch-lines | Maximum patch lines sent to AI synthesis. | no | 1200 |
| comment-mode | Comment behavior: update or new. | no | update |
| risk-profile-path | Optional path to a custom YAML risk profile. | no | "" |
| test-review-mode | How test impact is decided: auto, policy, or agent. Auto uses agent when a provider is configured. | no | auto |
| test-policy-path | Optional path to a YAML policy for deterministic test-review decisions. | no | "" |
| ai-timeout-ms | Request timeout in milliseconds for AI provider calls. | no | 30000 |
Outputs
| name | description |
|---|---|
| risk-level | Computed deterministic risk level: low, medium, high, or critical. |
| risk-score | Computed deterministic risk score. |