Merge pull request 'feat/pr-review-workflow' (#35) from feat/pr-review-workflow into master
All checks were successful
Auto Tag / build-linux-amd64 (push) Successful in 35m33s
Auto Tag / build-linux-arm64 (push) Successful in 35m41s
Auto Tag / build-macos-arm64 (push) Successful in 18m31s
Auto Tag / autotag (push) Successful in 8s
Auto Tag / wiki-sync (push) Successful in 9s
Auto Tag / build-windows-amd64 (push) Successful in 14m12s
All checks were successful
Auto Tag / build-linux-amd64 (push) Successful in 35m33s
Auto Tag / build-linux-arm64 (push) Successful in 35m41s
Auto Tag / build-macos-arm64 (push) Successful in 18m31s
Auto Tag / autotag (push) Successful in 8s
Auto Tag / wiki-sync (push) Successful in 9s
Auto Tag / build-windows-amd64 (push) Successful in 14m12s
Reviewed-on: #35
This commit is contained in:
commit
4fa01ae7ed
134
.gitea/workflows/pr-review.yml
Normal file
134
.gitea/workflows/pr-review.yml
Normal file
@ -0,0 +1,134 @@
|
|||||||
|
name: PR Review Automation
|
||||||
|
|
||||||
|
on:
|
||||||
|
pull_request:
|
||||||
|
types: [opened, synchronize, reopened, edited]
|
||||||
|
|
||||||
|
concurrency:
|
||||||
|
group: pr-review-${{ github.event.pull_request.number }}
|
||||||
|
cancel-in-progress: true
|
||||||
|
|
||||||
|
jobs:
|
||||||
|
review:
|
||||||
|
runs-on: ubuntu-latest
|
||||||
|
permissions:
|
||||||
|
pull-requests: write
|
||||||
|
container:
|
||||||
|
image: ubuntu:22.04
|
||||||
|
options: --dns 8.8.8.8 --dns 1.1.1.1
|
||||||
|
steps:
|
||||||
|
- name: Install dependencies
|
||||||
|
shell: bash
|
||||||
|
run: |
|
||||||
|
set -euo pipefail
|
||||||
|
apt-get update -qq && apt-get install -y -qq git curl jq
|
||||||
|
|
||||||
|
- name: Checkout code
|
||||||
|
shell: bash
|
||||||
|
env:
|
||||||
|
REPOSITORY: ${{ github.repository }}
|
||||||
|
run: |
|
||||||
|
set -euo pipefail
|
||||||
|
git init
|
||||||
|
git remote add origin "https://gogs.tftsr.com/${REPOSITORY}.git"
|
||||||
|
git fetch --depth=1 origin ${{ github.head_ref }}
|
||||||
|
git checkout FETCH_HEAD
|
||||||
|
|
||||||
|
- name: Get PR diff
|
||||||
|
id: diff
|
||||||
|
shell: bash
|
||||||
|
run: |
|
||||||
|
set -euo pipefail
|
||||||
|
git fetch origin ${{ github.base_ref }}
|
||||||
|
git diff origin/${{ github.base_ref }}..HEAD > /tmp/pr_diff.txt
|
||||||
|
echo "diff_size=$(wc -l < /tmp/pr_diff.txt | tr -d ' ')" >> $GITHUB_OUTPUT
|
||||||
|
|
||||||
|
- name: Analyze with Ollama
|
||||||
|
id: analyze
|
||||||
|
if: steps.diff.outputs.diff_size != '0'
|
||||||
|
shell: bash
|
||||||
|
env:
|
||||||
|
OLLAMA_URL: https://ollama-ui.tftsr.com/ollama/v1
|
||||||
|
OLLAMA_API_KEY: ${{ secrets.OLLAMA_API_KEY }}
|
||||||
|
PR_TITLE: ${{ github.event.pull_request.title }}
|
||||||
|
PR_NUMBER: ${{ github.event.pull_request.number }}
|
||||||
|
run: |
|
||||||
|
set -euo pipefail
|
||||||
|
if grep -q "^Binary files" /tmp/pr_diff.txt; then
|
||||||
|
echo "WARNING: Binary file changes detected — they will be excluded from analysis"
|
||||||
|
fi
|
||||||
|
DIFF_CONTENT=$(head -n 500 /tmp/pr_diff.txt \
|
||||||
|
| grep -v -E '^[+-].*(password[[:space:]]*[=:"'"'"']|token[[:space:]]*[=:"'"'"']|secret[[:space:]]*[=:"'"'"']|api_key[[:space:]]*[=:"'"'"']|private_key[[:space:]]*[=:"'"'"']|Authorization:[[:space:]]|AKIA[A-Z0-9]{16}|xox[baprs]-[0-9]{10,13}-[0-9]{10,13}-[a-zA-Z0-9]{24}|gh[opsu]_[A-Za-z0-9_]{36,}|https?://[^@[:space:]]+:[^@[:space:]]+@)' \
|
||||||
|
| grep -v -E '^[+-].*[A-Za-z0-9+/]{40,}={0,2}([^A-Za-z0-9+/=]|$)')
|
||||||
|
PROMPT="Analyze the following code changes for correctness, security issues, and best practices. PR Title: ${PR_TITLE}\n\nDiff:\n${DIFF_CONTENT}\n\nProvide a review with: 1) Summary, 2) Bugs/errors, 3) Security issues, 4) Best practices. Give specific comments with suggested fixes."
|
||||||
|
BODY=$(jq -cn \
|
||||||
|
--arg model "qwen3-coder-next:latest" \
|
||||||
|
--arg content "$PROMPT" \
|
||||||
|
'{model: $model, messages: [{role: "user", content: $content}], stream: false}')
|
||||||
|
echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] PR #${PR_NUMBER} - Calling Ollama API (${#BODY} bytes)..."
|
||||||
|
HTTP_CODE=$(curl -s --max-time 120 --connect-timeout 30 \
|
||||||
|
--retry 3 --retry-delay 5 --retry-connrefused --retry-max-time 120 \
|
||||||
|
-o /tmp/ollama_response.json -w "%{http_code}" \
|
||||||
|
-X POST "$OLLAMA_URL/chat/completions" \
|
||||||
|
-H "Authorization: Bearer $OLLAMA_API_KEY" \
|
||||||
|
-H "Content-Type: application/json" \
|
||||||
|
-d "$BODY")
|
||||||
|
echo "HTTP status: $HTTP_CODE"
|
||||||
|
echo "Response file size: $(wc -c < /tmp/ollama_response.json) bytes"
|
||||||
|
if [ "$HTTP_CODE" != "200" ]; then
|
||||||
|
echo "ERROR: Ollama returned HTTP $HTTP_CODE"
|
||||||
|
cat /tmp/ollama_response.json
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
if ! jq empty /tmp/ollama_response.json 2>/dev/null; then
|
||||||
|
echo "ERROR: Invalid JSON response from Ollama"
|
||||||
|
cat /tmp/ollama_response.json
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
REVIEW=$(jq -r '.choices[0].message.content // empty' /tmp/ollama_response.json)
|
||||||
|
if [ -z "$REVIEW" ]; then
|
||||||
|
echo "ERROR: No content in Ollama response"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
echo "Review length: ${#REVIEW} chars"
|
||||||
|
echo "$REVIEW" > /tmp/pr_review.txt
|
||||||
|
|
||||||
|
- name: Post review comment
|
||||||
|
if: always() && steps.diff.outputs.diff_size != '0'
|
||||||
|
shell: bash
|
||||||
|
env:
|
||||||
|
TF_TOKEN: ${{ secrets.TFT_GITEA_TOKEN }}
|
||||||
|
PR_NUMBER: ${{ github.event.pull_request.number }}
|
||||||
|
REPOSITORY: ${{ github.repository }}
|
||||||
|
run: |
|
||||||
|
set -euo pipefail
|
||||||
|
if [ -z "${TF_TOKEN:-}" ]; then
|
||||||
|
echo "ERROR: TFT_GITEA_TOKEN secret is not set"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
if [ -f "/tmp/pr_review.txt" ] && [ -s "/tmp/pr_review.txt" ]; then
|
||||||
|
REVIEW_BODY=$(head -c 65536 /tmp/pr_review.txt)
|
||||||
|
BODY=$(jq -n \
|
||||||
|
--arg body "🤖 Automated PR Review:\n\n${REVIEW_BODY}\n\n---\n*this is an automated review from Ollama*" \
|
||||||
|
'{body: $body, event: "COMMENT"}')
|
||||||
|
else
|
||||||
|
BODY=$(jq -n \
|
||||||
|
'{body: "⚠️ Automated PR Review could not be completed — Ollama analysis failed or produced no output.", event: "COMMENT"}')
|
||||||
|
fi
|
||||||
|
HTTP_CODE=$(curl -s --max-time 30 --connect-timeout 10 \
|
||||||
|
-o /tmp/review_post_response.json -w "%{http_code}" \
|
||||||
|
-X POST "https://gogs.tftsr.com/api/v1/repos/${REPOSITORY}/pulls/${PR_NUMBER}/reviews" \
|
||||||
|
-H "Authorization: Bearer $TF_TOKEN" \
|
||||||
|
-H "Content-Type: application/json" \
|
||||||
|
-d "$BODY")
|
||||||
|
echo "[$(date -u +%Y-%m-%dT%H:%M:%SZ)] Post review HTTP status: $HTTP_CODE"
|
||||||
|
if [ "$HTTP_CODE" != "200" ] && [ "$HTTP_CODE" != "201" ]; then
|
||||||
|
echo "ERROR: Failed to post review (HTTP $HTTP_CODE)"
|
||||||
|
cat /tmp/review_post_response.json
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
- name: Cleanup
|
||||||
|
if: always()
|
||||||
|
shell: bash
|
||||||
|
run: rm -f /tmp/pr_diff.txt /tmp/ollama_response.json /tmp/pr_review.txt /tmp/review_post_response.json
|
||||||
@ -1,7 +1,7 @@
|
|||||||
{
|
{
|
||||||
"name": "tftsr",
|
"name": "tftsr",
|
||||||
"private": true,
|
"private": true,
|
||||||
"version": "0.1.0",
|
"version": "0.2.50",
|
||||||
"type": "module",
|
"type": "module",
|
||||||
"scripts": {
|
"scripts": {
|
||||||
"dev": "vite",
|
"dev": "vite",
|
||||||
|
|||||||
@ -1,6 +1,6 @@
|
|||||||
[package]
|
[package]
|
||||||
name = "trcaa"
|
name = "trcaa"
|
||||||
version = "0.1.0"
|
version = "0.2.50"
|
||||||
edition = "2021"
|
edition = "2021"
|
||||||
|
|
||||||
[lib]
|
[lib]
|
||||||
|
|||||||
@ -1,6 +1,6 @@
|
|||||||
{
|
{
|
||||||
"productName": "Troubleshooting and RCA Assistant",
|
"productName": "Troubleshooting and RCA Assistant",
|
||||||
"version": "0.2.49",
|
"version": "0.2.50",
|
||||||
"identifier": "com.trcaa.app",
|
"identifier": "com.trcaa.app",
|
||||||
"build": {
|
"build": {
|
||||||
"frontendDist": "../dist",
|
"frontendDist": "../dist",
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user