The latest articles on DEV Community by mordecaiusm922-create (@mordecaiusm922create). https://dev.to/mordecaiusm922create https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3861596%2F93d20236-3081-4223-9b61-5e365a075d46.png https://dev.to/mordecaiusm922create en mordecaiusm922-create Sat, 04 Apr 2026 22:40:21 +0000 https://dev.to/mordecaiusm922create/i-built-a-github-action-that-auto-reviews-prs-with-llm-risk-assessment-evidence-mapping-alpha-4oc https://dev.to/mordecaiusm922create/i-built-a-github-action-that-auto-reviews-prs-with-llm-risk-assessment-evidence-mapping-alpha-4oc <p>I built a GitHub Action that analyzes pull requests automatically and posts structured comments.</p> <h2> What it does </h2> <ul> <li>Risk assessment (low/medium/high) based on file patterns and diff analysis</li> <li>Maps evidence to specific line numbers in the diff</li> <li>Detects security patterns: CVEs, broad exception handling, TLS misconfigurations</li> <li>Posts comment automatically on every PR</li> </ul> <h2> Example comment it leaves on a PR </h2> <blockquote> <p>🟢 Risk: LOW</p> <p>What: mypy upgraded from 1.3 to 1.5.1 in pyproject.toml<br> Why: Address bugs in mypy 1.5.1</p> <p>Evidence:</p> <ul> <li>pyproject.toml:L117 — mypy==1.5.1</li> </ul> </blockquote> <h2> Install (~2 minutes) </h2> <p>Just add the workflow file and two secrets to your repo. Full instructions in the README.</p> <p>Repo: <a href="https://github.com/mordecaiusm922-create/devmind" rel="noopener noreferrer">https://github.com/mordecaiusm922-create/devmind</a></p> <p>Still alpha. Looking for feedback on what's useful and what's noise.</p> codereview github llm showdev