Hammer

Hammer is a pull request reviewer that runs in your own GitHub Actions workflow with your own model key. Install the Hammer GitHub App, register your repository here, and its comments appear as hammer[bot].

  1. Install the Hammer GitHub App on your repository.
  2. Sign in and register the repository below (requires admin permission).
  3. Add id-token: write to your workflow permissions.
  4. Keep using your model API key as before.

Hammer never sees your code or your model key. It only issues a short-lived token, scoped to the one repository that asked, so the review can be posted under the bot's name.