Configure these in GitHub repo → Settings → Secrets and variables → Actions:
| Secret Name | Where to Get | Required |
|---|---|---|
OPENAI_API_KEY |
https://platform.openai.com/api-keys | ✅ Yes |
GITHUB_TOKEN |
Auto-provided by GitHub Actions | ✅ Auto (no setup) |
- Go to your repository on GitHub
- Settings → Secrets and variables → Actions → New repository secret
- Add:
- Name:
OPENAI_API_KEY - Secret: Your key from https://platform.openai.com/api-keys
- Name:
| Event | Trigger |
|---|---|
| PR opened/updated | Full scan + GitHub issue + PR comment |
Push to master/main |
Full scan + GitHub issue |
| Manual | Workflow dispatch |
- Scan results are posted as a GitHub Issue (labeled
auto-evolve) - For PR events: also posts as PR comment
- v4.3: Issues are auto-closed when all findings are resolved
When a scan finds no issues, an "All Clear" issue is still created so you have a record of when the project was verified clean:
## ✅ Auto-Evolve Scan — All Clear
No issues found. Project passed all four perspectives.