1. Documentation
  3. Introduction
ReadmeMarketplaceGitHub
  • Introduction
  • Quickstart
  • Supported providers
  • API-key providers
  • GitHub Copilot
  • OpenAI Codex
  • Amazon Bedrock
  • Action inputs
  • Reporting and severity
  • Audit lifecycle
  • Incremental audits
  • Safety boundaries
  • Troubleshooting

Introduction

Verified AI code reviews for GitHub pull requests.

Loading documentation…

QuickstartNext >

Powered by heyo

On this page

Review policyStart here

Heyo Code Audit is a GitHub Action that reviews pull requests with an AI model from Pi's bundled provider catalog. It inspects the pull-request diff and repository context, discovers candidate issues, and by default verifies each candidate in a separate Pi session before it publishes findings.

heyo-sh/heyo-code-audit

Loading repository data…

——

Review policy

Heyo can look for four kinds of issues:

CheckFocus
securityVulnerabilities, unsafe data handling, authorization, and secret exposure.
regressionBehaviour changed unintentionally by the pull request.
functionalMissing or incorrect behaviour in the changed code.
nonfunctionalReliability, maintainability, and operational concerns.

All four are enabled by default. Use the checks input to select a comma-separated subset.

Start here

Follow the Quickstart to add the Action to a repository. Then choose a model and authentication method in the supported providers guide. Read How the audit works for the discovery, verification, and reporting lifecycle.