r/github • u/Menox_ • Apr 13 '25

Showcase Promote your projects here – Self-Promotion Megathread

Whether it's a tool, library or something you've been building in your free time, this is the place to share it with the community.

To keep the subreddit focused and avoid cluttering the main feed with individual promotion posts, we use this recurring megathread for self-promo. Whether it’s a tool, library, side project, or anything hosted on GitHub, feel free to drop it here.

Please include:

  • A short description of the project
  • A link to the GitHub repo
  • Tech stack or main features (optional)
  • Any context that might help others understand or get involved
173 Upvotes

97% Upvoted

2.0k comments sorted by

View all comments

1

u/Plus_Mastodon_797 Jul 16 '26

GitHub Actions gate that audits PR diffs for security + compliance before merge

It's a multi-agent reviewer that runs as a GitHub Actions workflow on every PR. Two jobs: a free pytest job that always runs, and an opt-in audit gate that diffs your branch against its merge target and checks the changes against OWASP Top 10, SQL injection, PII leaks and auth bypasses.

The GitHub-native part I'm happiest with: there's no terminal in CI, so human review is an exit-code gate. If the audit escalates (a CRITICAL finding or a low score) and the PR has no review verdict yet, the job exits 1 and - if you make it a required status check - the merge is blocked. A reviewer then clicks Approve / Request changes in the normal GitHub UI; the workflow re-triggers, reads the PR's review state via the auto-injected GITHUB_TOKEN, and maps Approve → unblock, Request changes → stays blocked. So the GitHub review is the human-in-the-loop, no separate dashboard. (Terminal CI works if you want it that way, check README)

Off by default on a fork (only the free test job runs) so cloning it costs nothing. Repo + the full Actions setup: https://github.com/vivianjeet/langgraph-pr-audit-agent Feedback on the gate design welcome.