Hacktoberfest 2026: los issues que los mantenedores marcaron para octubre, abiertos y aptos para principiantes. Explorar issues de Hacktoberfest

Integrate Security Review Extension

Abierto
#218 7 comentarios 0 reacciones 1 asignado Ver en GitHub

@CallumHYoung ya está trabajando en esto.

Desde el 3/10/2025.

  • #329 de @CallumHYoung — fusionado
  • #340 de @jerop — fusionado

Evaluación

Este issue todavía no se ha evaluado.

Descripción

area/security kind/enhancement priority/p1

Problem

Currently, the Gemini CLI action provides general pull request review, but lacks a specialized security-focused pull request review workflow. As security becomes increasingly critical in software development, we need a dedicated security review process that can:

  • Automatically analyze code changes for security vulnerabilities
  • Provide detailed security-specific feedback with remediation guidance
  • Integrate seamlessly into existing PR workflows
  • Focus specifically on security concerns rather than general code quality

Solution

Update gemini-review.yml workflow to perform security reviews on pull requests.

  • Add extensions input to action.yml: This will allow us to configure the security extension.
  • Experiment in a test repository: We will test the security review extension in a separate repository until #269 is resolved. This will allow us to work on the extension without impacting the PR review workflow in this repository.
    • Dogfood upstream: We will use the security review extension in a workflow in https://github.com/google-gemini/gemini-cli. This will allow us to test the extension without impacting PR review workflow in this repository.
  • Integrate into PR review workflow: Once the extension is stable and issue #269 is fixed, we will add the security review step to the main PR review workflow.
  • Consolidate Feedback: Investigate how to generate both general and security feedback, then consolidate them to avoid duplication.

This approach will allow us to develop and test the security review functionality in a controlled environment before deploying it to the main repository.

Lenguaje dominante
TypeScript
Estrellas
2.1k
Forks
285
Merge medio
8 h 8 min
PR fusionados (30 d)
1

Guía de contribución

Abrir la guía de contribución

Primeros pasos

  1. Lee el issue completo y luego la guía de contribución del proyecto.
  2. Comenta en el issue que vas a ocuparte — evita que dos personas hagan lo mismo.
  3. Haz un fork del repositorio y trabaja en una rama.
  4. Abre un pull request que haga referencia al número del issue.

Más de google-github-actions/run-gemini-cli

Todos los issues de google-github-actions/run-gemini-cli

Issues similares

Más issues de TypeScript

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.