Agent code reviews

SetCloud Agent Tasks can analyze a GitHub pull request and preserve the result as an auditable agent run. Reviews are read-only: the current release does not post comments, push commits, or modify pull requests.

Create a review

Open the dashboard, choose Agents → Custom code → Pull-request reviews, select an agent with a connected GitHub repository, and choose Code review. The selected agent supplies the model, temperature, and base instructions from its Builder configuration. Enter any GitHub repository the App can access, the pull-request number, and task-specific instructions, then select Create & run.

Only organization owners and admins can create or run tasks. The SetCloud GitHub App must have read access to both the reviewer agent repository and the target repository. SetCloud requires a fresh, short-lived installation token for each review; it does not fall back to a stored user token.

Review context

A run reads the pull-request metadata, changed-file patches, and supported repository guidance files at the immutable pull-request head revision:

  • AGENTS.md
  • CLAUDE.md
  • CONTRIBUTING.md
  • .github/copilot-instructions.md

Repository content is treated as untrusted input. Patch input is bounded, and the review model is instructed to return only evidence-backed correctness, security, reliability, and maintainability findings.

Inspect a run

Open Agents → Custom code → Review history to view queued, running, completed, or failed reviews. Completed runs include the reviewed commit, summary, structured findings, file locations, severity, and recommendations.

The current review worker does not execute the repository build, tests, or linters. Runs therefore record checks.status as not_run; the dashboard does not claim that a suggested change has passed validation. Applying patches and posting GitHub reviews remain approval-gated future actions.