Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Test Reviewer customisation with a private github app #4

Open
wants to merge 4 commits into
base: main
Choose a base branch
from
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 8 additions & 1 deletion .github/workflows/ai-pr-review.yml
Original file line number Diff line number Diff line change
Expand Up @@ -21,10 +21,17 @@ jobs:
review:
Copy link
Owner Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@coderabbitai write me a summary of this pull request here

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Image description CodeRabbit

@Onigam Here's the summary for the pull request:

This pull request introduces changes to the .github/workflows/ai-pr-review.yml file, enhancing security and maintainability. A new step has been added to generate an installation token using the tibdex/github-app-token action. This token is then utilized in the AI PR Reviewer step as the GITHUB_TOKEN, replacing the usage of the GITHUB_TOKEN.

Additionally, the src/commenter.ts file has been updated to modify the Commenter class. The construction of a comment's body has been altered using a template literal, improving readability and maintainability.

These changes improve the security of the codebase by replacing the GITHUB_TOKEN with a generated token. The modifications in src/commenter.ts lead to more readable and maintainable code.

For further information, please refer to the detailed summary provided in the PR description.

Best,
coderabbitai

runs-on: ubuntu-latest
steps:
- name: Generate installation token
id: generate-token
uses: tibdex/github-app-token@v1
with:
app_id: 800935
private_key: ${{ secrets.CODE_REVIEW_APP_PRIVATE_KEY }}
installation_id: 46310774
- name: AI PR Reviewer
Comment on lines +24 to 31
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Image description CodeRabbit

This hunk introduces a new step to generate an installation token using the tibdex/github-app-token action. This change enhances security by replacing the usage of the GITHUB_TOKEN with a generated token specific to the GitHub App and installation.

The new step passes essential parameters such as the app ID, private key, and installation ID to the tibdex/github-app-token action. The generated token is then utilized in the AI PR Reviewer step as the GITHUB_TOKEN.

24:       - name: Generate installation token
25:         id: generate-token
26:         uses: tibdex/github-app-token@v1
27:         with:
28:           app_id: 800935
29:           private_key: ${{ secrets.CODE_REVIEW_APP_PRIVATE_KEY }}
30:           installation_id: 46310774
31:        - name: AI PR Reviewer
32:          uses: Onigam/[email protected]
33:          env:
34:           GITHUB_TOKEN: ${{ steps.generate-token.outputs.token }}

uses: Onigam/[email protected]
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
GITHUB_TOKEN: ${{ steps.generate-token.outputs.token }}
Onigam marked this conversation as resolved.
Show resolved Hide resolved
OPENAI_API_KEY: ${{ secrets.MISTRAL_API_KEY }}
with:
debug: false
Expand Down
3 changes: 1 addition & 2 deletions src/commenter.ts
Original file line number Diff line number Diff line change
Expand Up @@ -66,8 +66,7 @@ export class Commenter {
tag = COMMENT_TAG
}

const body = `${COMMENT_GREETING}

const body = `
${message}

${tag}`
Expand Down
Loading