thyn-ai/codna
Install codna from PyPI, then fix, review, or classify a repository through the same packaged local runtime users run locally.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| api-key | Optional Codna license / metering key. Local packaged runs can leave this empty when provider keys are supplied by environment. | no | "" |
| package-spec | PyPI package spec to install. Default installs the latest published codna package; pin for deterministic CI, e.g. codna==0.1.43. | no | codna |
| mode | What codna does: 'fix' opens a fix PR; 'review' posts or computes PR review findings; 'secure' runs read-only SARIF reachability classification. | no | fix |
| pr | Review mode: PR to review/post to: number, owner/repo#123, or PR URL. Defaults to the triggering pull_request number. | no | "" |
| diff | Review mode: optional diff range, e.g. origin/main...HEAD. Defaults to the PR base...head. | no | "" |
| post | Review mode: post findings to the PR. Set 'false' to compute findings only. | no | true |
| min-confidence | Review mode: only report findings at or above this confidence. | no | "" |
| blocking | Review mode: 'true' makes the Codna Review check fail on a blocking-severity finding. | no | false |
| effort | Review mode: review depth: low, medium, or high. | no | "" |
| issue | Fix mode: what is broken. Optional if from-junit is set. | no | "" |
| from-junit | Fix mode: path to a JUnit/pytest XML report; codna derives failing tests from it. | no | "" |
| from-sarif | Secure mode: path to the scanner's SARIF report. Required when mode=secure. | no | "" |
| reachability-engine | Secure mode reachability engine: remote or local. | no | remote |
| verification | Secure mode optional codna-security.yaml manifest. | no | "" |
| base-branch | Base branch for the pull request. Empty uses the repository default branch. | no | "" |
| model | Planner/review model. Use provider-qualified IDs for deterministic routing, e.g. openai/gpt-5. | no | repository.verified_agentic_v1 |
| github-token | Token with contents:write and pull-requests:write. Defaults to the workflow token. | no | ${{ github.token }} |
Outputs
| name | description |
|---|---|
| pull-request-url | URL of the pull request codna opened. Empty if no PR was opened. |