Review every pull request in CI

name: Pareto review
on:
  pull_request:
    types: [opened, synchronize, reopened]
permissions:
  contents: read
  pull-requests: write
jobs:
  review:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v7
        with:
          fetch-depth: 0
      - uses: actions/setup-node@v7
        with:
          node-version: 22
      - run: npm install -g @anthropic-ai/claude-code
      - name: Review the diff with Pareto
        env:
          ANTHROPIC_BASE_URL: https://api.unbiased.ai
          ANTHROPIC_AUTH_TOKEN: ${{ secrets.UNBIASED_API_KEY }}
          ANTHROPIC_MODEL: pareto
          BASE_REF: ${{ github.base_ref }}
        run: |
          git diff "origin/$BASE_REF...HEAD" | claude -p --bare --tools "" --setting-sources user \
            --append-system-prompt "You are reviewing a pull request. Report real bugs only: file, line, what goes wrong and the fix. If there are none, say LGTM." \
            "Review this diff." > review.md
      - name: Post the review on the pull request
        env:
          GH_TOKEN: ${{ github.token }}
          PR: ${{ github.event.pull_request.number }}
          KEY: ${{ secrets.UNBIASED_API_KEY }}
        run: |
          if grep -qF "$KEY" review.md; then
            echo "review.md contains the API key, not posting it" >&2
            exit 1
          fi
          gh pr comment "$PR" --edit-last --create-if-none --body-file review.md

# On the pull request branch, with main fetched
export ANTHROPIC_BASE_URL=https://api.unbiased.ai
export ANTHROPIC_AUTH_TOKEN=your-unbiased-api-key
export ANTHROPIC_MODEL=pareto
export BASE_REF=main
git diff "origin/$BASE_REF...HEAD" | claude -p --bare --tools "" --setting-sources user \
  --append-system-prompt "You are reviewing a pull request. Report real bugs only: file, line, what goes wrong and the fix. If there are none, say LGTM." \
  "Review this diff." > review.md
cat review.md

name: Pareto review
on:
  pull_request:
    types: [opened, synchronize, reopened]
permissions:
  contents: read
  pull-requests: write
jobs:
  review:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v7
        with:
          fetch-depth: 0
      - uses: actions/setup-node@v7
        with:
          node-version: 22
      - run: npm install -g @openai/codex
      - name: Point Codex at Unbiased
        run: |
          mkdir -p ~/.codex
          cat > ~/.codex/config.toml <<'TOML'
          model = "pareto"
          model_provider = "unbiased"

          [model_providers.unbiased]
          name = "Unbiased"
          base_url = "https://api.unbiased.ai/v1"
          env_key = "UNBIASED_API_KEY"
          wire_api = "responses"
          TOML
      - name: Review the diff with Pareto
        env:
          UNBIASED_API_KEY: ${{ secrets.UNBIASED_API_KEY }}
          BASE_REF: ${{ github.base_ref }}
        run: |
          codex review --base "origin/$BASE_REF" > review.md
      - name: Post the review on the pull request
        env:
          GH_TOKEN: ${{ github.token }}
          PR: ${{ github.event.pull_request.number }}
          KEY: ${{ secrets.UNBIASED_API_KEY }}
        run: |
          if grep -qF "$KEY" review.md; then
            echo "review.md contains the API key, not posting it" >&2
            exit 1
          fi
          gh pr comment "$PR" --edit-last --create-if-none --body-file review.md

# On the pull request branch, with main fetched
export CODEX_HOME=$(mktemp -d)  # leaves your own ~/.codex alone
cat > "$CODEX_HOME/config.toml" <<'TOML'
model = "pareto"
model_provider = "unbiased"

[model_providers.unbiased]
name = "Unbiased"
base_url = "https://api.unbiased.ai/v1"
env_key = "UNBIASED_API_KEY"
wire_api = "responses"
TOML
export UNBIASED_API_KEY=your-unbiased-api-key
export BASE_REF=main
codex review --base "origin/$BASE_REF" > review.md
cat review.md

name: Pareto review
on:
  pull_request:
    types: [opened, synchronize, reopened]
permissions:
  contents: read
  pull-requests: write
jobs:
  review:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v7
        with:
          fetch-depth: 0
      - uses: actions/setup-node@v7
        with:
          node-version: 22
      - run: npm i -g @continuedev/cli
      - name: Review the diff with Pareto
        env:
          UNBIASED_API_KEY: ${{ secrets.UNBIASED_API_KEY }}
          BASE_REF: ${{ github.base_ref }}
        run: |
          cat > "$RUNNER_TEMP/continue.yaml" <<YAML
          name: Unbiased
          version: 0.0.1
          schema: v1
          models:
            - name: Pareto
              provider: openai
              model: pareto
              apiBase: https://api.unbiased.ai/v1
              apiKey: $UNBIASED_API_KEY
              roles:
                - chat
          YAML
          cn -p --silent --readonly --config "$RUNNER_TEMP/continue.yaml" \
            "Review the changes in git diff origin/$BASE_REF...HEAD. Report real bugs only: file, line, what goes wrong and the fix. If there are none, say LGTM." > review.md
      - name: Post the review on the pull request
        env:
          GH_TOKEN: ${{ github.token }}
          PR: ${{ github.event.pull_request.number }}
          KEY: ${{ secrets.UNBIASED_API_KEY }}
        run: |
          if grep -qF "$KEY" review.md; then
            echo "review.md contains the API key, not posting it" >&2
            exit 1
          fi
          gh pr comment "$PR" --edit-last --create-if-none --body-file review.md

# On the pull request branch, with main fetched
export UNBIASED_API_KEY=your-unbiased-api-key
export RUNNER_TEMP=$(mktemp -d)
export BASE_REF=main
cat > "$RUNNER_TEMP/continue.yaml" <<YAML
name: Unbiased
version: 0.0.1
schema: v1
models:
  - name: Pareto
    provider: openai
    model: pareto
    apiBase: https://api.unbiased.ai/v1
    apiKey: $UNBIASED_API_KEY
    roles:
      - chat
YAML
cn -p --silent --readonly --config "$RUNNER_TEMP/continue.yaml" \
  "Review the changes in git diff origin/$BASE_REF...HEAD. Report real bugs only: file, line, what goes wrong and the fix. If there are none, say LGTM." > review.md
rm -r "$RUNNER_TEMP"  # the config file holds your key
cat review.md