Know which PRs need a closer look.

 1 +
 2 +
 3 +
 4 +
 5 +
 6 +
 7 +
 8 +
 9 +
10 +
11 +
12 +
13 +
14 +
15 +
16 +
17 +
18 +
19 +
20 +
21 +
22 +
23 +
24 +
25 +
26 +
27 +
28 +
29 +
30 +
31 +
32 +
33 +
34 +
35 +
36 +
37 +
38 +
39 +

# LGTM scores pull requests with a System One decision model.
# https://github.com/Temikus/lgtm
name: LGTM

on:
  pull_request_target:
    types: [opened, synchronize, reopened, edited, ready_for_review]
  pull_request_review:
    types: [submitted]

permissions: {}

concurrency:
  # Per event, so a review can't cancel a scoring run or the other way round.
  group: lgtm-${{ github.event_name }}-${{ github.event.pull_request.number }}
  cancel-in-progress: true

jobs:
  lgtm:
    runs-on: ubuntu-latest
    timeout-minutes: 10
    permissions:
      checks: write
      pull-requests: write
      issues: write
      contents: read
      # Read-only: lets LGTM see commit statuses from CI that isn't Actions.
      statuses: read
    # pull_request_target gives this job secrets and a write token while the
    # PR is untrusted. Never add a checkout or any other step to this job:
    # PR code running here would get both. LGTM reads the diff through the
    # API and its config from the base branch.
    steps:
      # For supply-chain safety, pin to a full commit SHA instead:
      #   uses: Temikus/lgtm@<commit SHA> # v0
      - uses: Temikus/lgtm@v0
        with:
          # Use a dedicated key with a spend limit.
          api-key: ${{ secrets.OPENROUTER_API_KEY }}