bugbit v1.0.0 — PR reviews with your Cursor agent

bugbit v1.0.0

First stable release of bugbit — a GitHub Action that runs your own Cursor agent on pull requests and posts line-anchored review comments.

Highlights

• Cursor built-in review skills: /code-review, /review-security, /simplify
• Custom tools for PR context, diff scope, and post_review batch comments
• Token permission preflight before the agent starts
• Fork PR fail-fast (read-only GITHUB_TOKEN on fork heads)
• Vendored ripgrep for ubuntu-latest (dist/vendor/linux-x64/rg)
• Optional JSONL stream log artifact (save-stream-log)

Usage

- uses: Vilancer/bugbit@v1
  with:
    cursor-api-key: ${{ secrets.CURSOR_API_KEY }}

Pin to @v1.0.0 for an exact version, or @v1 for compatible updates within major v1.

Requirements

• Job permissions: contents: read, pull-requests: write
• CURSOR_API_KEY repository secret
• runs-on: ubuntu-latest (supported vendored rg path)
• Same-repo PR branches (not fork heads)

Full docs

See README.