Security
Trust boundaries and data handling.
Security overview →ReviewSensei is free, open-source software. Inference, GitHub Actions minutes, and self-hosted runner capacity are yours to provision. Pick a route, understand the control matrix, and know what writes are enabled before you merge.
App installation alone does not run reviews. The GitHub App opens a setup pull request with workflows and repository variables. You still choose a provider, runner, and which write switches to enable.
Setup-v4 exposes nine independent switches. All default to false except automatic approval (REVIEWSENSEI_AUTO_APPROVE, default true when publication is enabled).
| Capability | Repository variable | Default | When enabled | Observation-only example |
|---|---|---|---|---|
| Analysis | REVIEWSENSEI_AUTO_REVIEW |
false | Runs provider inference on eligible same-repository pull requests (skips drafts). | Leave false and dispatch ReviewSensei review manually, or use CLI plan / doctor. |
| Comment publication | REVIEWSENSEI_GITHUB_WRITES |
false | Publishes validated inline comments and review summaries to GitHub. | Run analysis with writes disabled: provider calls occur; GitHub receives no review body. |
| Automatic approval / request changes | REVIEWSENSEI_AUTO_APPROVE |
true* | Blocking findings publish as REQUEST_CHANGES; eligible clean reviews may receive APPROVE. Set false for comment-only publication. |
Disable with REVIEWSENSEI_AUTO_APPROVE=false while keeping publication on for comment-only reviews. |
| Learning proposal generation | REVIEWSENSEI_LEARNING_PROPOSALS |
false | Model-generated learning proposals are produced during review runs. | Leave disabled; learnings remain ordinary repository files you manage manually. |
| Learning PR publication | REVIEWSENSEI_LEARNING_PRS |
false | Opens or refreshes a draft learning pull request on the default branch. | Enable proposals without PR publication to inspect proposal files locally from workflow logs. |
| Conversations | REVIEWSENSEI_MENTION_REPLIES |
false | Authorized @sensei mentions receive bounded thread replies (requires REVIEWSENSEI_GITHUB_WRITES=true). This switch controls only conversational replies: the maintainer commands @sensei review status|pause|continue|reenroll, @sensei verify, and @sensei dismiss|defer|accept-risk run whenever REVIEWSENSEI_GITHUB_WRITES=true and the comment body matches the caller workflow's @sensei routing gate. Those caller checks route the run; the mutation is re-authorized inside the reusable workflow against the broker-attested actor and the session ledger before any write. |
Leave disabled to skip conversational replies; mention events are ignored for reply publication. This switch does not disable commands: the maintainer surface @sensei review status|pause|continue|reenroll, @sensei verify, and @sensei dismiss|defer|accept-risk stays available whenever REVIEWSENSEI_GITHUB_WRITES=true — @sensei review status is read-only but still routes through the command job against the broker-attested actor. See the installation guide for the full grammar. |
| Artifact retention | REVIEWSENSEI_UPLOAD_ARTIFACTS |
false | Uploads review.json as GitHub Actions artifacts. |
Leave disabled; validated results stay inside the job unless you add your own upload step. |
*Automatic approval applies only when automatic review and GitHub writes are enabled and all eligibility gates pass.
Every path lists execution location, provider destination, credential names (never values), cost ownership, enabled writes, expected first-success output, and cleanup steps.
Install the ReviewSensei GitHub App on selected repositories. The App opens a setup pull request; review execution stays in your GitHub Actions environment.
OLLAMA_API_KEY; OpenRouter mode requires OPENROUTER_API_KEY.# Install the ReviewSensei GitHub App https://github.com/apps/reviewsensei REVIEWSENSEI_AUTO_REVIEW=true REVIEWSENSEI_GITHUB_WRITES=true REVIEWSENSEI_VERSION=0.6.5
Run the generated Remove ReviewSensei setup workflow. Uninstall the App from GitHub settings to stop new setup deliveries.
Copy the supported example workflow without installing the GitHub App. You own the workflow, runner labels, secrets, and every control switch.
# examples/github-actions/review-sensei-review.yml REVIEWSENSEI_PROVIDER_MODE=local REVIEWSENSEI_VERSION=0.6.5 REVIEWSENSEI_AUTO_REVIEW=false REVIEWSENSEI_GITHUB_WRITES=false OLLAMA_API_KEY
pip install review-sensei==0.6.5 review-sensei doctor --json
Delete or disable the workflow file and remove repository variables and secrets.
Install the published Python package or npm launcher, prepare a bounded diff, run offline diagnostics, then generate a review artifact.
pip install review-sensei==0.6.5 review-sensei doctor --json
npx --yes @reviewsensei/cli@0.6.5 --version npx --yes @reviewsensei/cli@0.6.5 prepare-diff \ --repository . --base-ref main --head-ref feature --output pr.patch
review-sensei prepare-diff --repository . --base-ref main --head-ref feature --output pr.patch review-sensei plan --diff pr.patch --repository owner/repo --pull-request 42 \ --base-sha <base> --head-sha <head> --json
review-sensei --diff pr.patch --repository owner/repo --pull-request 42 --output review.json
pip uninstall review-sensei and delete local artifacts.
Trust boundaries and data handling.
Security overview →Ollama local/cloud, OpenRouter, and CLI-only OpenAI-compatible presets.
Provider matrix →Portable GitHub Actions workflow.
Workflow examples →Version 0.6.5 release notes.
Full install and workflow details.
Canonical install docs →What leaves your repository.
Data handling →