48aea87028
* feat: add prek pre-commit hooks and dependabot Pre-commit hooks (via prek): - Basic hygiene: trailing-whitespace, end-of-file-fixer, check-yaml, check-added-large-files, check-merge-conflict - Security: detect-secrets, zizmor (GitHub Actions audit) - Linting: shellcheck, actionlint, oxlint, swiftlint - Formatting: oxfmt, swiftformat Dependabot: - npm and GitHub Actions ecosystems - Grouped updates (production/development/actions) - 7-day cooldown for supply chain protection Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com> * docs: add prek install instruction to AGENTS.md --------- Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
38 lines
1.4 KiB
Plaintext
38 lines
1.4 KiB
Plaintext
# Automated PR Review Workflow
|
|
# This workflow performs a multi-dimensional review of a codebase changes.
|
|
|
|
agent reviewer:
|
|
model: sonnet
|
|
prompt: "You are an expert software engineer specializing in code reviews."
|
|
|
|
agent security_expert:
|
|
model: opus
|
|
prompt: "You are a security researcher specializing in finding vulnerabilities."
|
|
|
|
agent performance_expert:
|
|
model: sonnet
|
|
prompt: "You are a performance engineer specializing in optimization."
|
|
|
|
# 1. Initial overview
|
|
let overview = session: reviewer
|
|
prompt: "Read the changes in the current directory and provide a high-level summary of the architectural impact."
|
|
|
|
# 2. Parallel deep-dive reviews
|
|
parallel:
|
|
security = session: security_expert
|
|
prompt: "Perform a deep security audit of the changes. Look for OWASP top 10 issues."
|
|
context: overview
|
|
|
|
perf = session: performance_expert
|
|
prompt: "Analyze the performance implications. Identify potential bottlenecks or regressions."
|
|
context: overview
|
|
|
|
style = session: reviewer
|
|
prompt: "Review for code style, maintainability, and adherence to best practices."
|
|
context: overview
|
|
|
|
# 3. Synthesis and final recommendation
|
|
session: reviewer
|
|
prompt: "Synthesize the security, performance, and style reviews into a final PR comment. Provide a clear 'Approve', 'Request Changes', or 'Comment' recommendation."
|
|
context: { security, perf, style, overview }
|