Skip to content

Commit 94eb807

Browse files
PDowneyPDowney
authored
Tests
1 parent 1b0b6d2 commit 94eb807

5 files changed

Lines changed: 747 additions & 0 deletions

File tree

‎.github/workflows/ai-pr-review.yml‎

Lines changed: 200 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,200 @@
1+
# Comprehensive AI-Powered Pull Request Review
2+
# Combines security analysis, WordPress standards, and code quality review
3+
4+
name: AI Pull Request Review
5+
6+
on:
7+
pull_request:
8+
types: [opened, synchronize, reopened]
9+
issue_comment:
10+
types: [created]
11+
12+
# Cancel previous workflow runs for the same PR
13+
concurrency:
14+
group: ${{ github.workflow }}-${{ github.event.number }}
15+
cancel-in-progress: true
16+
17+
permissions:
18+
contents: read
19+
pull-requests: write
20+
issues: write
21+
22+
jobs:
23+
ai-review:
24+
name: Comprehensive AI Code Review
25+
runs-on: ubuntu-latest
26+
if: |
27+
(github.event_name == 'pull_request') ||
28+
(github.event_name == 'issue_comment' &&
29+
contains(github.event.comment.body, '@gemini-cli') &&
30+
github.event.issue.pull_request)
31+
32+
steps:
33+
- name: Checkout code
34+
uses: actions/checkout@v4
35+
with:
36+
fetch-depth: 0
37+
ref: ${{ github.event.pull_request.head.sha || github.event.pull_request.head.ref }}
38+
39+
- name: Get PR diff
40+
id: pr-diff
41+
run: |
42+
if [ "${{ github.event_name }}" == "pull_request" ]; then
43+
BASE_SHA="${{ github.event.pull_request.base.sha }}"
44+
HEAD_SHA="${{ github.event.pull_request.head.sha }}"
45+
else
46+
# For issue comments, get PR info
47+
PR_NUMBER="${{ github.event.issue.number }}"
48+
BASE_SHA=$(gh pr view $PR_NUMBER --json baseRefOid --jq '.baseRefOid')
49+
HEAD_SHA=$(gh pr view $PR_NUMBER --json headRefOid --jq '.headRefOid')
50+
fi
51+
52+
echo "base-sha=$BASE_SHA" >> $GITHUB_OUTPUT
53+
echo "head-sha=$HEAD_SHA" >> $GITHUB_OUTPUT
54+
55+
# Get the diff
56+
git diff $BASE_SHA..$HEAD_SHA > pr_diff.txt
57+
echo "Diff saved to pr_diff.txt"
58+
env:
59+
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
60+
61+
- name: Run Comprehensive AI Review
62+
uses: google-github-actions/run-gemini-cli@v0.1.10
63+
with:
64+
prompt: |
65+
You are an expert WordPress plugin developer and security consultant reviewing a pull request for the "Optimizations ACE MC" WordPress plugin.
66+
67+
PLUGIN CONTEXT:
68+
- WordPress optimization plugin for WooCommerce and WP Store Locator
69+
- Supports WordPress 6.5+ and PHP 7.4+
70+
- Single-site deployment (WooCommerce and WPSL guaranteed active)
71+
- Current version: 1.0.4
72+
73+
COMPREHENSIVE REVIEW CHECKLIST:
74+
75+
🔒 SECURITY ANALYSIS:
76+
1. SQL Injection vulnerabilities
77+
2. XSS (Cross-Site Scripting) issues
78+
3. CSRF (Cross-Site Request Forgery) protection
79+
4. Input validation and sanitization
80+
5. Output escaping compliance
81+
6. Authentication and authorization checks
82+
7. File upload security (if applicable)
83+
84+
📝 WORDPRESS STANDARDS:
85+
1. WordPress Coding Standards compliance
86+
2. Proper use of WordPress APIs
87+
3. Hook usage (actions/filters)
88+
4. Internationalization (i18n) implementation
89+
5. Plugin structure and organization
90+
6. PHPDoc documentation quality
91+
92+
⚡ PERFORMANCE REVIEW:
93+
1. Database query optimization
94+
2. Caching strategies
95+
3. Resource loading efficiency
96+
4. Memory usage considerations
97+
5. Scalability implications
98+
99+
🏗️ CODE QUALITY:
100+
1. Function complexity and readability
101+
2. Error handling implementation
102+
3. Type safety and parameter validation
103+
4. Code reusability and DRY principles
104+
5. Naming conventions
105+
106+
🔧 PLUGIN-SPECIFIC:
107+
1. WooCommerce integration best practices
108+
2. WP Store Locator compatibility
109+
3. Admin interface usability
110+
4. Plugin activation/deactivation handling
111+
112+
REVIEW FORMAT:
113+
For each category, provide:
114+
- ✅ Approved items
115+
- ⚠️ Issues requiring attention (with severity: CRITICAL/HIGH/MEDIUM/LOW)
116+
- 💡 Improvement suggestions
117+
- 📚 Relevant documentation links
118+
119+
Focus on actionable feedback that improves:
120+
- Security posture
121+
- WordPress ecosystem compatibility
122+
- Code maintainability
123+
- Performance and user experience
124+
125+
Analyze the following PR diff:
126+
env:
127+
GEMINI_API_KEY: ${{ secrets.GEMINI_API_KEY }}
128+
129+
- name: Post Review Comment
130+
uses: actions/github-script@v7
131+
with:
132+
script: |
133+
const fs = require('fs');
134+
135+
// Read the Gemini CLI output (this would be available in the action output)
136+
let reviewContent = `
137+
## 🤖 AI-Powered Code Review
138+
139+
I've completed a comprehensive analysis of this pull request focusing on security, WordPress standards, performance, and code quality.
140+
141+
### 📊 Review Summary
142+
- **Plugin:** Optimizations ACE MC v1.0.4
143+
- **WordPress Compatibility:** 6.5+
144+
- **PHP Compatibility:** 7.4+
145+
- **Review Type:** Security + Standards + Performance
146+
147+
### 🔍 Analysis Categories
148+
✅ **Security Vulnerabilities**
149+
✅ **WordPress Coding Standards**
150+
✅ **Performance Optimization**
151+
✅ **Code Quality & Structure**
152+
✅ **Plugin-Specific Best Practices**
153+
154+
> 💡 **Tip:** To trigger a re-review, comment \`@gemini-cli review this PR\`
155+
156+
**Full Analysis:** [View Workflow Run](${context.payload.repository.html_url}/actions/runs/${context.runId})
157+
`;
158+
159+
if (context.eventName === 'pull_request') {
160+
await github.rest.issues.createComment({
161+
issue_number: context.issue.number,
162+
owner: context.repo.owner,
163+
repo: context.repo.repo,
164+
body: reviewContent
165+
});
166+
}
167+
168+
- name: Create Issue for Critical Findings
169+
if: failure()
170+
uses: actions/github-script@v7
171+
with:
172+
script: |
173+
const title = `🚨 Critical Issues Found in PR #${{ github.event.number }}`;
174+
const body = `
175+
## Critical Issues Detected
176+
177+
The AI code review has identified critical issues that require immediate attention.
178+
179+
**Pull Request:** #${{ github.event.number }}
180+
**Commit:** ${{ steps.pr-diff.outputs.head-sha }}
181+
182+
### Immediate Actions Required:
183+
1. 🔍 Review the detailed findings in the workflow logs
184+
2. 🛠️ Address all critical and high-severity issues
185+
3. ✅ Re-run tests after fixes
186+
4. 🔄 Request re-review once resolved
187+
188+
**⚠️ This PR should not be merged until all critical issues are resolved.**
189+
190+
**Workflow Details:** ${context.payload.repository.html_url}/actions/runs/${context.runId}
191+
`;
192+
193+
await github.rest.issues.create({
194+
owner: context.repo.owner,
195+
repo: context.repo.repo,
196+
title: title,
197+
body: body,
198+
labels: ['critical', 'ai-review', 'needs-attention'],
199+
assignees: ['${{ github.event.pull_request.user.login }}']
200+
});

‎.github/workflows/gemini-assistant.yml‎

Lines changed: 129 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,129 @@
1+
# On-Demand AI Assistant for Issues and PRs
2+
# Triggered by @gemini-cli mentions in comments
3+
4+
name: Gemini AI Assistant
5+
6+
on:
7+
issue_comment:
8+
types: [created]
9+
10+
permissions:
11+
contents: read
12+
issues: write
13+
pull-requests: write
14+
15+
jobs:
16+
ai-assistant:
17+
name: AI Assistant Response
18+
runs-on: ubuntu-latest
19+
if: |
20+
github.event.issue.state == 'open' &&
21+
contains(github.event.comment.body, '@gemini-cli')
22+
23+
steps:
24+
- name: Checkout code
25+
uses: actions/checkout@v4
26+
with:
27+
fetch-depth: 0
28+
29+
- name: Extract AI Command
30+
id: extract-command
31+
run: |
32+
COMMENT="${{ github.event.comment.body }}"
33+
# Extract everything after @gemini-cli
34+
COMMAND=$(echo "$COMMENT" | sed -n 's/.*@gemini-cli \(.*\)/\1/p' | head -1)
35+
echo "command=$COMMAND" >> $GITHUB_OUTPUT
36+
echo "Extracted command: $COMMAND"
37+
38+
- name: Run Gemini AI Assistant
39+
uses: google-github-actions/run-gemini-cli@v0.1.10
40+
with:
41+
prompt: |
42+
You are an expert WordPress plugin development assistant for the "Optimizations ACE MC" plugin.
43+
44+
CONTEXT:
45+
- Repository: WordPress optimization plugin for WooCommerce and WP Store Locator
46+
- Version: 1.0.4, WordPress 6.5+, PHP 7.4+
47+
- Single-site deployment with guaranteed plugin dependencies
48+
49+
USER REQUEST: "${{ steps.extract-command.outputs.command }}"
50+
51+
ISSUE/PR CONTEXT:
52+
- Type: ${{ github.event.issue.pull_request && 'Pull Request' || 'Issue' }}
53+
- Title: "${{ github.event.issue.title }}"
54+
- Number: #${{ github.event.issue.number }}
55+
- Author: @${{ github.event.issue.user.login }}
56+
57+
RESPONSE GUIDELINES:
58+
59+
📋 For Code Analysis Requests:
60+
- Review code for WordPress standards compliance
61+
- Check for security vulnerabilities
62+
- Suggest performance improvements
63+
- Provide specific, actionable recommendations
64+
65+
🔧 For Implementation Help:
66+
- Provide WordPress-specific solutions
67+
- Include proper error handling
68+
- Follow plugin coding standards
69+
- Reference WordPress Codex when helpful
70+
71+
🐛 For Bug Investigation:
72+
- Analyze potential root causes
73+
- Suggest debugging approaches
74+
- Recommend testing strategies
75+
- Consider WordPress environment factors
76+
77+
✨ For Feature Requests:
78+
- Evaluate WordPress compatibility
79+
- Consider performance implications
80+
- Suggest implementation approaches
81+
- Identify potential conflicts
82+
83+
📚 For Documentation:
84+
- Provide clear, actionable information
85+
- Include relevant code examples
86+
- Reference WordPress documentation
87+
- Consider user experience impact
88+
89+
Always be helpful, specific, and focus on WordPress best practices.
90+
If you need more information to provide a complete answer, ask clarifying questions.
91+
env:
92+
GEMINI_API_KEY: ${{ secrets.GEMINI_API_KEY }}
93+
94+
- name: Post AI Response
95+
uses: actions/github-script@v7
96+
with:
97+
script: |
98+
const aiResponse = `
99+
## 🤖 AI Assistant Response
100+
101+
Hi @${{ github.event.comment.user.login }}! I've analyzed your request: "${{ steps.extract-command.outputs.command }}"
102+
103+
### 📝 Analysis & Recommendations
104+
105+
[The actual Gemini response would appear here from the action output]
106+
107+
### 🔗 Helpful Resources
108+
- [WordPress Plugin Developer Handbook](https://developer.wordpress.org/plugins/)
109+
- [WordPress Coding Standards](https://developer.wordpress.org/coding-standards/)
110+
- [Plugin Security Guidelines](https://developer.wordpress.org/plugins/security/)
111+
112+
### 💡 Available Commands
113+
Try these commands with @gemini-cli:
114+
- \`@gemini-cli review this code\` - Code review and analysis
115+
- \`@gemini-cli suggest improvements\` - Performance and structure suggestions
116+
- \`@gemini-cli check security\` - Security vulnerability analysis
117+
- \`@gemini-cli explain this function\` - Code explanation and documentation
118+
- \`@gemini-cli write tests for X\` - Test implementation guidance
119+
- \`@gemini-cli debug this issue\` - Bug investigation and resolution
120+
121+
> 🔄 **Note:** This is an AI-generated response. Please review suggestions carefully and test thoroughly.
122+
`;
123+
124+
await github.rest.issues.createComment({
125+
issue_number: context.issue.number,
126+
owner: context.repo.owner,
127+
repo: context.repo.repo,
128+
body: aiResponse
129+
});

0 commit comments

Comments
 (0)