feat: add Code Review automation
User description
Adds a new Factory-managed CI workflow.
- File:
.github/workflows/droid-review.yml - Triggers:
workflow_dispatch
Created via the Factory Automations UI (no agent involved -- this PR was opened directly via the GitHub API).
Manage this automation in Factory
Summary by cubic
Adds a Factory-managed droid-review.yml workflow that runs automatic code and security reviews via Factory-AI/droid-action on pull requests, pushes, and manual dispatch.
- Requires a
FACTORY_API_KEYsecret to be set in the repository for the workflow to run.
CodeAnt-AI Description
Run automated code and security reviews on pull requests
What Changed
- Newly opened pull requests and branch pushes trigger automated code and security reviews
- Reviews can also be started manually
Impact
✅ Code feedback on new pull requests
✅ Security issues surfaced during review
✅ Reviews run on branch updates
💡 Usage Guide
Checking Your Pull Request
Every time you make a pull request, our system automatically looks through it. We check for security issues, mistakes in how you're setting up your infrastructure, and common code problems. We do this to make sure your changes are solid and won't cause any trouble later.
Talking to CodeAnt AI
Got a question or need a hand with something in your pull request? You can easily get in touch with CodeAnt AI right here. Just type the following in a comment on your pull request, and replace "Your question here" with whatever you want to ask:
@codeant-ai ask: Your question here
This lets you have a chat with CodeAnt AI about your pull request, making it easier to understand and improve your code.
Example
@codeant-ai ask: Can you suggest a safer alternative to storing this secret?
Preserve Org Learnings with CodeAnt
You can record team preferences so CodeAnt AI applies them in future reviews. Reply directly to the specific CodeAnt AI suggestion (in the same thread) and replace "Your feedback here" with your input:
@codeant-ai: Your feedback here
This helps CodeAnt AI learn and adapt to your team's coding style and standards.
Example
@codeant-ai: Do not flag unused imports.
Retrigger review
Ask CodeAnt AI to review the PR again, by typing:
@codeant-ai: review
Check Your Repository Health
To analyze the health of your code repository, visit our dashboard at https://app.codeant.ai. This tool helps you identify potential issues and areas for improvement in your codebase, ensuring your repository maintains high standards of code health.
Summary by CodeRabbit
- New Features
- Pull requests can now receive automated code and security reviews when opened or updated. Reviews can also be started manually, making it easier to get feedback on changes as work progresses.