Feat: GitHub integration (#25)

Author: HungKNguyen

.github/workflows/code-review.yml

@@ -19,6 +19,9 @@ jobs:
       pull-requests: write
     steps:
       - uses: actions/checkout@v4
+        with:
+          ref: ${{ github.event.pull_request.head.sha || github.sha }}
+          fetch-depth: 2
 
       - uses: ./
         with:

action.yml

@@ -206,15 +206,37 @@ runs:
       shell: bash
       env:
         GH_TOKEN: ${{ env.GITHUB_TOKEN || github.token }}
+        GITHUB_REPOSITORY: ${{ github.repository }}
       run: |
         # Get authenticated user (the bot making API calls)
-        echo "Debug: GH_TOKEN is set: $([ -n "$GH_TOKEN" ] && echo 'yes' || echo 'no')"
-        echo "Debug: Attempting to detect bot identity..."
+        # Note: /user endpoint doesn't work with GitHub App tokens, so we try multiple methods
+        BOT_LOGIN=""
+
+        # Method 1: Try /user endpoint (works for PATs, not GitHub App tokens)
+        if [ -z "$BOT_LOGIN" ]; then
+          if BOT_LOGIN_TMP=$(gh api user --jq '.login' 2>/dev/null); then
+            BOT_LOGIN="$BOT_LOGIN_TMP"
+            echo "Detected bot via /user endpoint: $BOT_LOGIN"
+          fi
+        fi
+
+        # Method 2: Try installation endpoint (works for GitHub App tokens)
+        if [ -z "$BOT_LOGIN" ]; then
+          if INSTALLATION_DATA=$(gh api "repos/$GITHUB_REPOSITORY/installation" 2>/dev/null); then
+            APP_SLUG=$(echo "$INSTALLATION_DATA" | jq -r '.app_slug // empty' 2>/dev/null)
+            if [ -n "$APP_SLUG" ] && [ "$APP_SLUG" != "null" ]; then
+              BOT_LOGIN="${APP_SLUG}[bot]"
+              echo "Detected bot via installation endpoint: $BOT_LOGIN"
+            fi
+          fi
+        fi
 
-        if ! BOT_LOGIN=$(gh api user --jq '.login' 2>&1); then
-          echo "Warning: Failed to detect bot identity (error: $BOT_LOGIN), using default"
+        # Method 3: Fallback to default
+        if [ -z "$BOT_LOGIN" ]; then
           BOT_LOGIN="github-actions"
+          echo "Using default bot identity: $BOT_LOGIN"
         fi
+
         echo "bot_login=$BOT_LOGIN" >> $GITHUB_OUTPUT
         echo "Detected bot identity: $BOT_LOGIN"
 
@@ -510,9 +532,31 @@ runs:
         CLAUDECODE_FINDINGS: ${{ steps.claudecode-scan.outputs.findings_count }}
         SILENCE_CLAUDECODE_COMMENTS: ${{ steps.claudecode-check.outputs.silence_claudecode_comments }}
         ACTION_PATH: ${{ github.action_path }}
+        PR_HEAD_SHA: ${{ github.event.pull_request.head.sha || steps.pr-info.outputs.pr_sha }}
       run: |
         node "$ACTION_PATH/scripts/comment-pr-findings.js"
 
+    - name: Request bot as reviewer
+      if: steps.claudecode-check.outputs.enable_claudecode == 'true'
+      shell: bash
+      env:
+        GH_TOKEN: ${{ env.GITHUB_TOKEN || github.token }}
+        GITHUB_REPOSITORY: ${{ github.repository }}
+        PR_NUMBER: ${{ github.event.pull_request.number || steps.pr-info.outputs.pr_number }}
+        BOT_LOGIN: ${{ steps.bot-identity.outputs.bot_login }}
+      run: |
+        # Request the bot as a reviewer to make it appear in the PR's reviewer list
+        # This is optional and will fail silently if the bot is already a reviewer or doesn't have permissions
+        echo "Requesting $BOT_LOGIN as reviewer for PR #$PR_NUMBER..."
+
+        if gh api "repos/$GITHUB_REPOSITORY/pulls/$PR_NUMBER/requested_reviewers" \
+          -X POST \
+          -f "reviewers[]=$BOT_LOGIN" 2>/dev/null; then
+          echo "Successfully requested $BOT_LOGIN as reviewer"
+        else
+          echo "Note: Could not request bot as reviewer (this is normal if bot is already a reviewer or is the PR author)"
+        fi
+
 branding:
   icon: 'shield'
   color: 'red'

scripts/comment-pr-findings.js

@@ -11,16 +11,24 @@ const { spawnSync } = require('child_process');
 const PR_SUMMARY_MARKER = '📋 **PR Summary:**';
 
 // Parse GitHub context from environment
+const eventData = process.env.GITHUB_EVENT_PATH ? JSON.parse(fs.readFileSync(process.env.GITHUB_EVENT_PATH, 'utf8')) : {};
 const context = {
   repo: {
     owner: process.env.GITHUB_REPOSITORY?.split('/')[0] || '',
     repo: process.env.GITHUB_REPOSITORY?.split('/')[1] || ''
   },
   issue: {
-    number: parseInt(process.env.GITHUB_EVENT_PATH ? JSON.parse(fs.readFileSync(process.env.GITHUB_EVENT_PATH, 'utf8')).pull_request?.number : '') || 0
+    number: parseInt(eventData.pull_request?.number || eventData.issue?.number || 0)
   },
   payload: {
-    pull_request: process.env.GITHUB_EVENT_PATH ? JSON.parse(fs.readFileSync(process.env.GITHUB_EVENT_PATH, 'utf8')).pull_request : {}
+    pull_request: {
+      ...eventData.pull_request,
+      head: {
+        ...(eventData.pull_request?.head || {}),
+        // Use PR_HEAD_SHA from environment if available (more reliable than event payload)
+        sha: process.env.PR_HEAD_SHA || eventData.pull_request?.head?.sha || ''
+      }
+    }
   }
 };