Skip to content
Open
Changes from 2 commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
24 changes: 24 additions & 0 deletions .github/workflows/automatically-request-copilot-review.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,24 @@
name: Automatic Copilot Code Review

on:
pull_request:
types:
- opened # brand-new PRs
- ready_for_review # PR drafts marked "Ready for review"
- reopened # PRs that were closed then reopened
- synchronize # PRs updated with new commits

jobs:
add-copilot-to-pr-reviews:
name: "Add Copilot to PR reviews"
if: ${{ github.event.pull_request.draft == false }} # skip still-draft PRs
runs-on: ubuntu-latest
env:
GH_TOKEN: ${{ secrets.GH_TOKEN_COPILOT_REVIEW }} # gh CLI picks this up automatically

steps:
- name: Install gh-copilot-review extension
run: gh extension install ChrisCarini/gh-copilot-review
Copy link

Copilot AI Sep 21, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Installing a third-party extension without version pinning poses security risks. The extension could be updated with malicious code between workflow runs. Consider pinning to a specific version or commit hash, such as gh extension install ChrisCarini/gh-copilot-review --pin.

Suggested change
run: gh extension install ChrisCarini/gh-copilot-review
run: gh extension install ChrisCarini/gh-copilot-review --pin

Copilot uses AI. Check for mistakes.

- name: Ask Copilot to review this PR
run: gh copilot-review "${{ github.event.pull_request.html_url }}"
Loading