AI 代码审查自动化：如何让 AI 代理帮你把关代码质量

name: AI Code Review
on:
  pull_request:
    types: [opened, synchronize]
 
jobs:
  review:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: AI Code Review
        run: |
          # 获取 PR 的 diff
          curl -s -H "Authorization: token ${{ secrets.GITHUB_TOKEN }}" \
            "https://api.github.com/repos/${{ github.repository }}/pulls/${{ github.event.pull_request.number }}" \
            | jq -r '.body' > pr_description.txt
          # 获取文件变更
          curl -s -H "Authorization: token ${{ secrets.GITHUB_TOKEN }}" \
            "https://api.github.com/repos/${{ github.repository }}/pulls/${{ github.event.pull_request.number }}/files" \
            | jq -r '.[] | .filename + "\n" + .patch' > diff_output.txt

# 将 diff 和提示语拼接为请求
MESSAGE=$(cat prompt_template.txt diff_output.txt | jq -Rs .)
curl -s -X POST "https://api.openai.com/v1/chat/completions" \
  -H "Authorization: Bearer ${{ secrets.OPENAI_API_KEY }}" \
  -H "Content-Type: application/json" \
  -d '{
    "model": "gpt-4o",
    "messages": [
      {"role": "system", "content": "你是一个严格但公正的代码审查员。"},
      {"role": "user", "content": '"$MESSAGE"'}
    ],
    "temperature": 0.3
  }' > review_result.json

# 提取审查结果中的问题
ISSUES=$(cat review_result.json | jq -r '.choices[0].message.content')
 
# 发布为 PR 评论
COMMENT_BODY="## 🤖 AI 代码审查结果
 
$ISSUES"
 
JSON=$(jq -n --arg body "$COMMENT_BODY" '{"body": $body}')
curl -s -X POST \
  -H "Authorization: token ${{ secrets.GITHUB_TOKEN }}" \
  -H "Content-Type: application/json" \
  -d "$JSON" \
  "https://api.github.com/repos/${{ github.repository }}/issues/${{ github.event.pull_request.number }}/comments"

- name: Cache previous review
  uses: actions/cache@v3
  with:
    path: .review-cache
    key: review-${{ github.event.pull_request.head.sha }}

name: AI Code Review
on:
  pull_request:
    types: [opened, synchronize]
  issue_comment:
    types: [created]
    if: contains(github.event.comment.body, '/review')
 
jobs:
  lint-and-review:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      
      - name: Setup Python
        uses: actions/setup-python@v5
        with:
          python-version: '3.12'
          
      - name: 运行 lint 检查
        run: |
          pip install flake8 black
          flake8 app/ tests/ --max-line-length=100
          black --check app/ tests/
          
      - name: 运行类型检查
        run: |
          pip install mypy
          mypy app/
          
      - name: AI 代码审查
        env:
          OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          PR_NUMBER=${{ github.event.pull_request.number }}
          REPO=${{ github.repository }}
          
          # 获取 diff
          curl -s -H "Authorization: token $GITHUB_TOKEN" \
            "https://api.github.com/repos/$REPO/pulls/$PR_NUMBER/files" \
            | jq -r '.[] | "## \(.filename)\n\n\(.patch)"' > diff_content.md
          
          # 检查是否有需要审查的文件
          if [ ! -s diff_content.md ]; then
            echo "没有需要审查的代码变更"
            exit 0
          fi
          
          # 构建审查提示
          python3 .github/scripts/build_review_prompt.py diff_content.md
          
      - name: 发布审查结果
        run: |
          python3 .github/scripts/post_review_comment.py

import sys
import os
 
def build_review_prompt(diff_path):
    with open(diff_path) as f:
        diff = f.read()
    
    # 读取项目规则
    project_rules = ""
    if os.path.exists(".review-rules.md"):
        with open(".review-rules.md") as f:
            project_rules = f.read()
    
    prompt = f"""你是一个严格的代码审查员，负责审查以下 PR 变更。
 
## 项目规则
{project_rules if project_rules else "无特殊规则"}
 
## 审查要求
1. 检查逻辑错误和潜在的运行时异常
2. 检查安全漏洞（SQL 注入、XSS、路径遍历等）
3. 检查是否遵循了项目约定（命名规范、导入顺序等）
4. 检查测试覆盖率是否充分
5. 检查新增的依赖是否必要
 
## 输出格式
对于每个问题，按以下格式输出：
 
### [严重程度] 文件路径:行号
- **问题描述**：描述具体问题
- **建议修复**：可选的修复建议
 
严重程度分级：
- 🔴 CRITICAL：会导致生产事故的问题
- 🟠 WARNING：可能导致错误的问题
- 🟡 SUGGESTION：代码质量改进建议
 
## 变更内容
{diff}
"""
    return prompt
 
if __name__ == "__main__":
    prompt = build_review_prompt(sys.argv[1])
    # 调用 LLM API...

import os
import json
import requests
 
def post_review_comment(review_text):
    token = os.environ["GITHUB_TOKEN"]
    repo = os.environ["GITHUB_REPOSITORY"]
    pr_number = os.environ.get("PR_NUMBER", "")
    
    if not review_text.strip() or "没有问题" in review_text:
        print("审查通过，无需发表评论")
        return
    
    comment_body = f"""## 🤖 AI 代码审查结果
 
{review_text}
 
---
*由 AI 自动审查，仅供参考。最终合并决策由项目维护者确认。*"""
 
    url = f"https://api.github.com/repos/{repo}/issues/{pr_number}/comments"
    headers = {
        "Authorization": f"token {token}",
        "Content-Type": "application/json",
    }
    data = {"body": comment_body}
    resp = requests.post(url, headers=headers, json=data)
    print(f"审查评论已发布: {resp.status_code}")
 
if __name__ == "__main__":
    with open("review_output.txt") as f:
        review = f.read()
    post_review_comment(review)