v1.0.0

Full Changelog: https://github.com/DevSecOps-AppSec/ai-secure-code-review-action/commits/v1.0.0### What’s new

• Initial public release of AI Secure Code Review GitHub Action
• Performs a 2-minute AppSec review of changed PR hunks using a ChatGPT-compatible API
• Posts structured findings as a single, idempotent comment on the PR
• Supports OpenAI, OpenRouter, or other API-compatible backends

Permissions required

• contents: read — to fetch diffs
• pull-requests: write — to post the review comment

Usage example

name: Secure Code Review
on:
  pull_request:
    types: [opened, synchronize, reopened, ready_for_review]

jobs:
  review:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      pull-requests: write
    steps:
      - uses: DevSecOps-AppSec/ai-secure-code-review-action@v1.0.0
        with:
          openai_api_key: ${{ secrets.OPENAI_API_KEY }}
          model: gpt-4o-mini
          time_budget_seconds: 90
          max_files: 20
          max_lines: 1000