aws-genai-cicd-suite.yml

name: Intelligent Code Review
# Enable manual trigger
on:
  workflow_dispatch:
  pull_request:
    types: [opened, synchronize]

    # Avoid running the same workflow on the same branch concurrently
concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}

jobs:
  review:
    runs-on: ubuntu-latest
    environment: AWS_ROLE_TO_ASSUME

    permissions:
      # read repository contents and write pull request comments
      id-token: write
      # allow github action bot to push new content into existing pull requests
      contents: write
      # contents: read
      pull-requests: write
    steps:
    - name: Checkout code
      uses: actions/checkout@v3

    - name: Set up Node.js
      uses: actions/setup-node@v3
      with:
        node-version: '20'

    - name: Install dependencies @actions/core and @actions/github
      run: |
        npm install @actions/core
        npm install @actions/github
      shell: bash

    # check if required dependencies @actions/core and @actions/github are installed
    - name: Check if required dependencies are installed
      run: |
        npm list @actions/core
        npm list @actions/github
      shell: bash

    - name: Debug GitHub Token and environment variables
      run: |
        if [ -n "${{ secrets.GITHUB_TOKEN }}" ]; then
          echo "GitHub Token is set"
        else
          echo "GitHub Token is not set"
        fi
        if [ -n "${{ vars.AWS_ROLE_TO_ASSUME_VAR }}" ]; then
          echo "Role to Assume is set"
        else
          echo "Role to Assume is not set"

    # assume the specified IAM role and set up the AWS credentials for use in subsequent steps.
    - name: Configure AWS Credentials
      uses: aws-actions/configure-aws-credentials@v4
      with:
        # using repository environment variable to get the role arn
        role-to-assume: ${{ vars.AWS_ROLE_TO_ASSUME_VAR }}
        aws-region: us-east-1

    - name: Intelligent GitHub Actions
      uses: aws-samples/aws-genai-cicd-suite@stable
      with:
        # Automatic Provision: The GITHUB_TOKEN is automatically created and provided by GitHub for each workflow run. You don't need to manually create or store this token as a secret.
        github-token: ${{ secrets.GITHUB_TOKEN }}
        aws-region: us-east-1
        model-id: anthropic.claude-3-sonnet-20240229-v1:0
        generate-code-review: 'true'
        generate-code-review-level: 'detailed'
        generate-code-review-exclude-files: '*.md,*.json,*.js'
        generate-pr-description: 'true'
        generate-unit-test: 'false'
        generate-unit-test-source-folder: 'debugging'
        # Removed the invalid input 'generate-unit-test-exclude-files'
        # output-language: 'zh'
      env:
        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}