Hanna Hosk
← All projects

Pipeline guardrailsNo change merges unchecked

AI-reviewed pull request pipeline

A small kit that adds the same pull request pipeline to any of my repos: automated checks, an AI code review, a security review and a gate before merging.

For
Open source, my own tool
Year
2026
Status
In use, public
  1. Pull request

    A change is opened

  2. Checks

    Lint, types, tests, build, secret scan, package audit

  3. AI code review

    Comments on the code and sets a risk level

  4. Security review

    A second AI pass, only for security

  5. Gate

    All green, all threads resolved, up to date with main

Low risk
Merges on its own
Medium or high risk
Waits for my approval on GitHub

Problem

When AI agents write a lot of the code, I want every change checked the same way before it reaches main, without doing it all by hand.

What I built

Shared workflows for lint, types, tests, build, secret scanning and package audits. An AI review that comments on the pull request and sets a risk level. A gate that merges low-risk changes on its own. The rest wait for my approval on GitHub, and Slack tells me when.

Result

Public under the MIT licence. It runs on my newer repos, and every new repo gets it from the start.

Stack

  • GitHub Actions
  • Claude Code
  • gitleaks
  • actionlint
  • shellcheck
  • Slack API
  • Bash

More projects

Moiwak, a startupMoiwak portalRead more ↘Consulting firm, internal toolCompany KPI portalRead more ↘Furniture supplierPrice-list portalRead more ↘