Conversation
There was a problem hiding this comment.
Thanks for the update adding optional model passthrough and documenting it. Overall looks good. I have one suggestion around supply-chain security and build reproducibility.
🤖 Automated review complete. Please react with 👍 or 👎 on the individual review comments to provide feedback on their usefulness.
| - name: Run Augment Agent | ||
| uses: augmentcode/augment-agent@6f08f56902d6728a0ffbbb2004c136c06fec8104 # v0.1.0 | ||
| uses: augmentcode/augment-agent@v0 | ||
| with: |
There was a problem hiding this comment.
Security and reproducibility nit: consider pinning the action to a commit SHA instead of a floating tag. Using @v0 can pick up changes unexpectedly, which makes builds harder to reproduce and increases supply-chain risk.
For example, pin to a known-good commit (the repo previously used a pinned SHA):
uses: augmentcode/augment-agent@6f08f56902d6728a0ffbbb2004c136c06fec8104If you still prefer auto-updates, consider at least a specific minor version tag (e.g., v0.1.x) and monitor with Dependabot/Actions review, acknowledging the trade-offs.
README.md
Outdated
| | `pull_number` | The number of the pull request being reviewed | Yes | `${{ github.event.pull_request.number }}` | | ||
| | `repo_name` | The full name (owner/repo) of the repository | Yes | `${{ github.repository }}` | | ||
| | `custom_guidelines` | Custom guidelines to include in PR reviews | No | See [Custom Guidelines](#custom-guidelines) section | | ||
| | `model` | Optional model name to use; passed directly to augment agent | No | e.g., openai/gpt-4o-mini | |
There was a problem hiding this comment.
The example should probably be a model that's publicly available (sonnet4 or gpt5)
Add optional model selection and update Augment Agent reference
modelinput to the composite action and forward it toaugmentcode/augment-agentmodelinput in the README with an example (e.g.,openai/gpt-4o-mini)augmentcode/augment-agent@v0Why
v0action series that accepts themodelparameterNotes
modelis not provided, the agent’s default model is usedv0tag follows GitHub’s recommended major-version pinning; teams that require strict pinning can switch back to a specific SHAUsage example
🤖 This description was generated automatically. Please react with 👍 if it's helpful or 👎 if it needs improvement.