🐙 GitHub Actions Integration
Automate pull request reviews and security audits with IBM Bob 2.0 (≥ 97% AST Accuracy) directly inside your CI/CD pipelines.
PR Automated Trigger
Runs on pull_request & push
97%+ AST Accuracy
Zero false positive compile check
Security Gates
Blocks SQLi, RCE & credentials
Step Summaries
Rich Markdown PR reports
⚙️ Workflow Generator
Configure your .github/workflows/devflow_review.yml file.
.github/workflows/devflow_review.yml
YAML • Ready to Deploy
name: DevFlow AI Automated Code Review & Security Audit
on:
pull_request:
branches: [ main, master, develop ]
types: [ opened, synchronize, reopened ]
push:
branches: [ main, master ]
workflow_dispatch:
permissions:
contents: read
pull-requests: write
jobs:
devflow-review:
name: IBM Bob 2.0 AI Code Review (97%+ Accuracy)
runs-on: ubuntu-latest
steps:
- name: Checkout Code
uses: actions/checkout@v4
with:
fetch-depth: 0
- name: Set up Python
uses: actions/setup-python@v5
with:
python-version: '3.11'
- name: Install Dependencies
run: |
python -m pip install --upgrade pip
pip install -r requirements.txt || true
- name: Run DevFlow AI Code Review Action
env:
INPUT_MIN_SCORE: "75"
INPUT_FAIL_ON_CRITICAL: "true"
INPUT_FILES_PATTERN: "**/*.py"
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
run: |
python scripts/devflow_action.py🚀 3-Minute Setup Guide
1
Add the Workflow File
Create
.github/workflows/devflow_review.yml in your repository.2
Include the Action Runner
Ensure
scripts/devflow_action.py and ibm_bob/ are in your repo root.3
Open a Pull Request
GitHub Actions automatically audits code, annotates lines, and generates fix recipes!
🧪 Live PR Webhook Simulator
Test how DevFlow AI processes a real GitHub Pull Request webhook event.
PR #42 Diff: auth_service.py
def login(username, password='admin123'):
query = f"SELECT * FROM users WHERE u='{username}'"
return eval(username)