deepcode.yml

name: deep-code

# Generated by `deepcode github install` (deep-code 0.4.1).
# This file only turns the bot on; the pipeline lives in the reusable
# workflow referenced below. That ref decides which version runs —
# a branch tracks fixes automatically, a tag freezes them.
# Inputs and the security model are documented in that workflow's header:
# https://github.com/liwenka1/deep-code
#
# By default only the repository OWNER can trigger it. Widening that hands
# anyone who can comment the ability to run shell in this CI, next to these
# secrets — read the security notes before changing `allowed-associations`.

on:
  issue_comment:
    types: [created]

jobs:
  deepcode:
    # What the pipeline needs to push a branch, open a PR, and reply.
    permissions:
      contents: write
      pull-requests: write
      issues: write
    uses: liwenka1/deep-code/.github/workflows/deepcode-bot.yml@main
    with:
      lang: zh
      permission-mode: accept_edits
    secrets:
      deepseek-api-key: ${{ secrets.DEEPSEEK_API_KEY }}
      # Acting as your own GitHub App: commits count toward contributors,
      # comments carry a [bot] badge, and bot pushes trigger your other
      # workflows (a GITHUB_TOKEN push does not).
      app-id: ${{ secrets.DEEPCODE_APP_ID }}
      app-private-key: ${{ secrets.DEEPCODE_APP_PRIVATE_KEY }}