Publish proper PR reviews from a dedicated bot account #19

Open
opened 2026-07-20 22:03:24 +01:00 by nimmo · 0 comments
Owner

Move the reviewer from a marker-based issue comment to proper Forgejo pull-request reviews authored by a dedicated ai-review account.\n\nScope:\n- Document/provision a least-privilege bot account and repository-scoped token.\n- Submit COMMENT reviews against the reviewed head commit; preserve one updateable bot review/report per PR where Forgejo permits.\n- Add inline review comments only for findings with precise changed-file/line evidence.\n- Keep human approval and merge decisions authoritative; do not auto-approve or merge.\n- Retain fork protections and document the token/security boundary.\n- Add mocked API tests for review creation, update behaviour, and inline-comment validation.\n\nAcceptance:\n- A PR authored by nimmo visibly receives a review authored by ai-review.\n- The bot can give structured feedback without needing approval/merge authority.\n- Human replies remain available to later bot review runs.

Move the reviewer from a marker-based issue comment to proper Forgejo pull-request reviews authored by a dedicated ai-review account.\n\nScope:\n- Document/provision a least-privilege bot account and repository-scoped token.\n- Submit COMMENT reviews against the reviewed head commit; preserve one updateable bot review/report per PR where Forgejo permits.\n- Add inline review comments only for findings with precise changed-file/line evidence.\n- Keep human approval and merge decisions authoritative; do not auto-approve or merge.\n- Retain fork protections and document the token/security boundary.\n- Add mocked API tests for review creation, update behaviour, and inline-comment validation.\n\nAcceptance:\n- A PR authored by nimmo visibly receives a review authored by ai-review.\n- The bot can give structured feedback without needing approval/merge authority.\n- Human replies remain available to later bot review runs.
Sign in to join this conversation.
No labels
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
nimmo/forgejo-auto-pr-review#19
No description provided.