Multi-stage, multi-agent AI code review for GitHub — self-hosted, provider-neutral.

gh secret set ANTHROPIC_API_KEY --repo <owner>/<repo>

name: Manki

on:
  pull_request:
    types: [opened, synchronize, ready_for_review]
  pull_request_review:
    types: [submitted, dismissed]
  issue_comment:
    types: [created, edited]
  pull_request_review_comment:
    types: [created]

permissions:
  contents: read          # read repo files and diffs
  pull-requests: write    # post review comments and approvals
  issues: write           # create nit issues when configured
  id-token: write         # OIDC token for GitHub App identity
  actions: read           # verify workflow run is legitimate

jobs:
  review:
    if: github.actor != 'manki-review[bot]'
    concurrency:
      group: manki-${{ github.event_name }}-${{ github.event.comment.id || github.event.pull_request.number || github.event.issue.number || github.run_id }}
      cancel-in-progress: true
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with:
          node-version: '24'
          cache: 'npm'
      - name: Manki Review
        uses: manki-review/manki@v5
        with:
          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
          # github_token: ${{ secrets.GITHUB_TOKEN }}  # Only if not using the GitHub App
          # memory_repo_token: ${{ secrets.REVIEW_MEMORY_TOKEN }}  # Only if memory repo is separate