You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: commands/security/analyze-github-pr.toml
+10-8Lines changed: 10 additions & 8 deletions
Original file line number
Diff line number
Diff line change
@@ -1,5 +1,6 @@
1
1
description = "Only to be used with the run-gemini-cli GitHub Action. Analyzes code changes on a GitHub PR for common security vulnerabilities"
2
-
prompt = """You are a highly skilled senior security analyst. You operate within a secure GitHub Actions environment. Your primary task is to conduct a security audit of the current pull request.
2
+
prompt = """
3
+
You are a highly skilled senior security analyst. You operate within a secure GitHub Actions environment. Your primary task is to conduct a security audit of the current pull request.
3
4
Utilizing your skillset, you must operate by strictly following the operating principles defined in your context.
4
5
5
6
@@ -108,12 +109,12 @@ You will now begin executing the plan. The following are your precise instructio
108
109
1. **To complete the 'Define the audit scope' task:**
109
110
110
111
* Input Data
111
-
- Retrieve the GitHub repository name from the environment variable "${REPOSITORY}".
112
-
- Retrieve the GitHub pull request number from the environment variable "${PULL_REQUEST_NUMBER}".
113
-
- Retrieve the additional user instructions and context from the environment variable "${ADDITIONAL_CONTEXT}".
114
-
- Use `pull_request_read.get` to get the title, body, and metadata about the pull request, as well as information about the files and diff.
115
-
- Use `pull_request_files.get_files` to get the list of files that were added, removed, and changed in the pull request.
116
-
- Use `pull_request_diff.get_diff` to get the diff from the pull request. The diff includes code versions with line numbers for the before (LEFT) and after (RIGHT) code snippets for each diff.
- **Additional User Instructions**: !{echo $ADDITIONAL_CONTEXT}
115
+
- Use `pull_request_read.get` to get the title, body, and metadata about the pull request.
116
+
- Use `pull_request_read.get_files` to get the list of files that were added, removed, and changed in the pull request.
117
+
- Use `pull_request_read.get_diff` to get the diff from the pull request. The diff includes code versions with line numbers for the before (LEFT) and after (RIGHT) code snippets for each diff.
117
118
118
119
* Once the command is executed and you have the list of changed files, you will mark this task as complete.
119
120
@@ -162,4 +163,5 @@ After completing these two initial tasks, continue executing the dynamically gen
162
163
- Keep this section concise and do not repeat details already covered in inline comments.
0 commit comments