| ai_provider | AI provider: gemini, openai, claude, anthropic-vertex, gemini-vertex | yes | — |
| ai_model | Model identifier | yes | — |
| ai_api_key | AI provider API key (not required for anthropic-vertex or gemini-vertex, which use GCP ADC) | no | — |
| vertex_project_id | GCP project ID for Vertex AI Claude (falls back to google_cloud_project if not set) | no | — |
| cloud_ml_region | DEPRECATED: Use google_cloud_location instead. Vertex AI region for anthropic-vertex. | no | — |
| google_cloud_project | GCP project ID for Vertex AI (required for gemini-vertex, optional fallback for anthropic-vertex) | no | — |
| google_cloud_location | Vertex AI location (default: global) | no | — |
| task_file | Path to DSPy YAML task file | no | — |
| task_prompt | Inline task prompt (alternative to task_file) | no | — |
| report_template | Path to custom HTML report template | no | — |
| mcp_servers_config | JSON array of MCP server configs (optional, for future use) | no | [] |
| slack_webhook_url | Slack webhook URL for notifications | no | — |
| post_pr_comment | Post analysis results as PR comment (requires github-token with pull-requests: write) | no | false |
| submit_review | Submit a formal PR review with APPROVE or REQUEST_CHANGES based on AI analysis (requires github-token with pull-requests: write) | no | false |
| inline_review_comments | Post AI findings as inline comments on PR diff lines. Best used with submit_review and delegation_mode=auto for structured findings. (requires github-token with pull-requests: write) | no | false |
| run_govulncheck | Run govulncheck for vulnerability reachability analysis (requires Go and govulncheck installed) | no | false |
| dep_review_severity_threshold | Minimum semver bump to analyze for dep review: minor or major | no | minor |
| delegation_mode | Enable AI-powered sub-agent delegation: none (default) or auto | no | none |
| max_sub_agents | Maximum concurrent sub-agents for delegation (1-10, default: 3) | no | 3 |
| delegation_verify_findings | Verify each sub-agent finding against the actual codebase via a lightweight AI check to reduce false positives (default: false) | no | false |
| github_token | GitHub token for API access | no | ${{ github.token }} |