![I built a GitHub Action that auto-reviews PRs with LLM — risk assessment + evidence mapping [alpha, OSS]](/_next/image?url=https%3A%2F%2Fmedia2.dev.to%2Fdynamic%2Fimage%2Fwidth%3D1200%2Cheight%3D627%2Cfit%3Dcover%2Cgravity%3Dauto%2Cformat%3Dauto%2Fhttps%253A%252F%252Fdev-to-uploads.s3.amazonaws.com%252Fuploads%252Farticles%252F4wi4lg9hzr8o0rp28k34.png&w=1200&q=75)
I built a GitHub Action that auto-reviews PRs with LLM — risk assessment + evidence mapping [alpha, OSS]
I built a GitHub Action that analyzes pull requests automatically and posts structured comments. What it does Risk assessment (low/medium/high) based on file patterns and diff analysis Maps evidence to specific line numbers in the diff Detects security patterns: CVEs, broad exception handling, TLS misconfigurations Posts comment automatically on every PR Example comment it leaves on a PR 🟢 Risk: LOW What: mypy upgraded from 1.3 to 1.5.1 in pyproject.toml Why: Address bugs in mypy 1.5.1 Evidence: pyproject.toml:L117 — mypy==1.5.1 Install (~2 minutes) Just add the workflow file and two secrets to your repo. Full instructions in the README. Repo: https://github.com/mordecaiusm922-create/devmind Still alpha. Looking for feedback on what's useful and what's noise.
Continue reading on Dev.to
Opens in a new tab

.png&w=1200&q=75)