cmd2/.github/workflows/gemini-review.yml at b12abcbb083994586be97b299eca7aff6640383c · python-cmd2/cmd2 · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
name: "🔎 Gemini Review"

on:
  workflow_call:
    inputs:
      additional_context:
        type: "string"
        description: "Any additional context from the request"
        required: false

concurrency:
  group:
    "${{ github.workflow }}-review-${{ github.event_name }}-${{ github.event.pull_request.number ||
    github.event.issue.number }}"
  cancel-in-progress: true

defaults:
  run:
    shell: "bash"

jobs:
  review:
    runs-on: "ubuntu-latest"
    timeout-minutes: 7
    permissions:
      contents: "read"
      id-token: "write"
      issues: "write"
      pull-requests: "write"
    steps:
      - name: "Mint identity token"
        id: "mint_identity_token"
        if: |-
          ${{ vars.APP_ID }}
        uses: "actions/create-github-app-token@a8d616148505b5069dccd32f177bb87d7f39123b" # ratchet:actions/create-github-app-token@v2
        with:
          app-id: "${{ vars.APP_ID }}"
          private-key: "${{ secrets.APP_PRIVATE_KEY }}"
          permission-contents: "read"
          permission-issues: "write"
          permission-pull-requests: "write"

      - name: "Checkout repository"
        uses: "actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8" # ratchet:actions/checkout@v5

      - name: "Run Gemini pull request review"
        uses: "google-github-actions/run-gemini-cli@v0" # ratchet:exclude
        id: "gemini_pr_review"
        env:
          GITHUB_TOKEN:
            "${{ steps.mint_identity_token.outputs.token || secrets.GITHUB_TOKEN || github.token }}"
          ISSUE_TITLE: "${{ github.event.pull_request.title || github.event.issue.title }}"
          ISSUE_BODY: "${{ github.event.pull_request.body || github.event.issue.body }}"
          PULL_REQUEST_NUMBER:
            "${{ github.event.pull_request.number || github.event.issue.number }}"
          REPOSITORY: "${{ github.repository }}"
          ADDITIONAL_CONTEXT: "${{ inputs.additional_context }}"
        with:
          gcp_location: "${{ vars.GOOGLE_CLOUD_LOCATION }}"
          gcp_project_id: "${{ vars.GOOGLE_CLOUD_PROJECT }}"
          gcp_service_account: "${{ vars.SERVICE_ACCOUNT_EMAIL }}"
          gcp_workload_identity_provider: "${{ vars.GCP_WIF_PROVIDER }}"
          gemini_api_key: "${{ secrets.GEMINI_API_KEY }}"
          gemini_cli_version: "${{ vars.GEMINI_CLI_VERSION }}"
          gemini_debug: "${{ fromJSON(vars.GEMINI_DEBUG || vars.ACTIONS_STEP_DEBUG || false) }}"
          gemini_model: "${{ vars.GEMINI_MODEL }}"
          google_api_key: "${{ secrets.GOOGLE_API_KEY }}"
          use_gemini_code_assist: "${{ vars.GOOGLE_GENAI_USE_GCA }}"
          use_vertex_ai: "${{ vars.GOOGLE_GENAI_USE_VERTEXAI }}"
          upload_artifacts: "${{ vars.UPLOAD_ARTIFACTS }}"
          workflow_name: "gemini-review"
          settings: |-
            {
              "model": {
                "maxSessionTurns": 25
              },
              "telemetry": {
                "enabled": true,
                "target": "local",
                "outfile": ".gemini/telemetry.log"
              },
              "mcpServers": {
                "github": {
                  "command": "docker",
                  "args": [
                    "run",
                    "-i",
                    "--rm",
                    "-e",
                    "GITHUB_PERSONAL_ACCESS_TOKEN",
                    "ghcr.io/github/github-mcp-server:v0.18.0"
                  ],
                  "includeTools": [
                    "add_comment_to_pending_review",
                    "create_pending_pull_request_review",
                    "pull_request_read",
                    "submit_pending_pull_request_review"
                  ],
                  "env": {
                    "GITHUB_PERSONAL_ACCESS_TOKEN": "${GITHUB_TOKEN}"
                  }
                }
              },
              "tools": {
                "core": [
                  "run_shell_command(cat)",
                  "run_shell_command(echo)",
                  "run_shell_command(grep)",
                  "run_shell_command(head)",
                  "run_shell_command(tail)"
                ]
              }
            }
          prompt: "/gemini-review"