An automated code review bot that uses Sourcegraph's Amp AI to provide intelligent feedback on pull requests in your GitHub repository.

• 🤖 Automated code review on every PR
• 📝 Inline comments with specific file and line references
• 🎯 Intelligent analysis for security, performance, and code quality issues
• 🔄 Re-runs on PR updates
• 📊 Structured feedback with priority levels (HIGH, MEDIUM, LOW)

Save the code-revie.yml file to your repository at:

.github/workflows/code-revie.yml

You need to configure one secret in your GitHub repository:

• AMP_API_KEY: Your Sourcegraph Amp API key

1. Go to your GitHub repository
2. Click Settings → Secrets and variables → Actions
3. Click New repository secret
4. Add the following secret:

Note: The workflow automatically uses GITHUB_TOKEN which is provided by GitHub Actions - no setup required.

The workflow needs the following permissions (automatically configured in the YAML):

• contents: read - to checkout code and read files
• pull-requests: write - to create review comments

1. Trigger: Automatically runs when a PR is opened or updated
2. Analysis:
   • Fetches the PR diff
   • Generates intelligent code review using Amp AI
   • Analyzes for security, performance, and quality issues
3. Feedback: Creates inline comments on specific lines with:
   • Issue severity (🔴 HIGH, 🟡 MEDIUM, 🟢 LOW)
   • Detailed descriptions
   • Actionable suggestions

1. Create a new branch:

   git checkout -b test-amp-review

2. Add a simple file with intentional issues:

   // test-file.js
   function badFunction() {
       var password = "hardcoded123"; // Security issue
       console.log(password); // Security issue
       
       // Performance issue - inefficient loop
       for(var i = 0; i < 1000000; i++) {
           document.getElementById("test"); // DOM query in loop
       }
   }

3. Commit and push:

   git add test-file.js
   git commit -m "Add test file for code review"
   git push origin test-amp-review

4. Create a pull request on GitHub

1. Go to Actions tab in your repository
2. Look for "Amp Review Bot" workflow
3. Check that it runs successfully
4. Verify review comments appear on your PR

✅ Success indicators:

• Workflow runs without errors
• PR gets review comments with specific line references
• Comments include severity levels and suggestions

❌ Common issues:

• Missing AMP_API_KEY: Workflow fails at "Run AMP review" step
• No comments: Check that the PR has actual code changes
• Workflow doesn't trigger: Verify file is at .github/workflows/code-revie.yml

Edit the prompt in the "Run AMP review" step to focus on specific areas:

echo "Please analyze the following diff for:"
echo "- Missing or insufficient unit tests"        # Testing focus
echo "- Security vulnerabilities"                  # Security focus
echo "- Performance issues"                        # Performance focus
echo "- Code quality problems"                     # Quality focus
echo "- Architecture concerns"                     # Architecture focus
echo "- Best practices violations"                 # Best practices focus

Modify the on section to change when reviews run:

on:
  pull_request:
    types: [opened, synchronize, ready_for_review]  # Add ready_for_review
  # Or add manual trigger:
  workflow_dispatch:

The bot categorizes issues into three levels:

• 🔴 HIGH: Critical security/performance issues
• 🟡 MEDIUM: Code quality and maintainability issues
• 🟢 LOW: Minor improvements and suggestions

• Check file location: .github/workflows/code-revie.yml
• Verify YAML syntax is valid
• Ensure you have write access to the repository

• Verify AMP_API_KEY is set correctly
• Check that PR has meaningful code changes
• Look at workflow logs in Actions tab

• Ensure AMP_API_KEY secret is set
• Verify the API key is valid and active
• Check Amp account has sufficient quota

• This can happen with complex diffs
• The bot tries to find the closest relevant line
• Consider smaller, focused PRs for better accuracy

• Amp Documentation: ampcode.com/manual
• GitHub Actions: docs.github.com/actions
• Issues: Create an issue in this repository for bug reports

1. Fork the repository
2. Create a feature branch
3. Test your changes with the workflow
4. Submit a pull request

This workflow uses Sourcegraph's Amp AI for intelligent code analysis. Visit ampcode.com to learn more.