vanducng/MIU PR Review
AI code review on a pull request — installs the released miucr binary and runs `miucr review --pr --post`.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| github-token | GitHub token used to read the PR and post review comments. | no | ${{ github.token }} |
| api-key | API key for the review provider (Anthropic by default; sent as ANTHROPIC_API_KEY / ANTHROPIC_AUTH_TOKEN). | yes | — |
| gate | Severity gate — fail the run if a finding reaches this level (none|low|medium|high|critical). | no | high |
| version | miucr release tag to install (defaults to the latest published release). | no | latest |
| base-url | Optional Anthropic-compatible gateway base URL (e.g. a GLM/z.ai endpoint). | no | "" |
| model | Optional model override (else the provider/profile default). | no | "" |
| sarif-file | Optional path to also write a SARIF 2.1.0 report (e.g. miucr.sarif). When set, the SAME single review run writes the file (via --sarif-out) so a later github/codeql-action/upload-sarif step can publish findings to the Security tab — no second LLM pass. The file is written only on a successful review; a failed review leaves no file. Unset (default) keeps inline-review-only. | no | "" |
| filter-mode | Inline-eligibility filter for the posted review: added|diff_context|file| nofilter (default diff_context). file/nofilter surface off-diff findings in the summary and SARIF but never inline. | no | diff_context |
| suggest | Emit GitHub native one-click suggested edits for findings with a proven clean single-line/contiguous replacement (author-applied, never pushed). Default true. | no | true |
| patch-repair | When a single-line fix almost applies but the model's patch is rejected, make one focused second pass to repair it into a clean one-click suggestion. Requires suggest. Adds a small number of extra LLM calls. Default false. | no | false |
| build-from-source | Build miucr from the checked-out source (CGO_ENABLED=0 go build ./cmd/miucr) instead of installing the released binary. Used by miu-cr's own dogfood so a PR is reviewed by ITS code, not the last release. Requires Go on the runner. | no | false |
| pr-number | PR number to review (defaults to the pull_request event's number). | no | ${{ github.event.pull_request.number }} |
| instruction | Extra free-text steer passed to miucr review --instruction. | no | "" |
Outputs
no outputs