Configuration

Agents

Builds .github/pr-review-agents.yml for acme/checkout-api. This dashboard has no GitHub credentials, so nothing here is written to the repository — copy the YAML and commit it yourself.

Agents, in the order they run

Order is the order findings reach the synthesiser. Reorder with the arrow buttons.

  1. securityAuth, cross-tenant access, injection, secret leakage, privilege
  2. correctnessLogic errors, wrong bounds, unhandled null, broken error handling
  3. performanceN+1 queries, unbounded reads, quadratic scans, blocking I/O
  4. test-coverageBranches this change adds or changes and leaves untested
  5. docs-driftDocumentation this change made wrong

Behaviour

Commits to the pull request branch. Needs contents: write. Left off, fixes are offered as suggested changes instead.

Stores review memory on this branch. Needs contents: write and closed in the workflow’s types. Empty leaves the feature off.

Path gate

A gate, not a narrowing: one matching file wakes the agent, which then reviews the whole pull request. Patterns are repository-relative.

Include

Files that wake the agents, e.g. packages/github/**

Exclude

Subtracted from the above, written as ! negations.

Matches the configuration loaded for acme/checkout-api.

.github/pr-review-agents.yml

Commit this to your default branch.

agents:
  - agent: security
    paths:
      - "src/**"
      - "!**/*.snap"
      - "!dist/**"
  - agent: correctness
    paths:
      - "src/**"
      - "!**/*.snap"
      - "!dist/**"
  - agent: performance
    paths:
      - "src/**"
      - "!**/*.snap"
      - "!dist/**"
  - agent: test-coverage
    paths:
      - "src/**"
      - "!**/*.snap"
      - "!dist/**"
  - agent: docs-drift
    paths:
      - "src/**"
      - "!**/*.snap"
      - "!dist/**"

.github/pr-review-agents.yml updated: 5 agents, 3 path patterns.