The AI agent that lives in your pull requests. It audits code, simulates runtime execution, and orchestrates fixes before you even start your review.
Ghostwriter isn't just a chatbot. It's a multi-agent system powered by Google Gemini 2.0 and Weave.
Scans diffs for secret leaks, injection risks, and dependency vulnerabilities using Chain-of-Thought reasoning.
Actually runs your code. Generates test cases, executes them in a sandbox, and verifies logic before merge.
Manages the workflow. Decomposes complex PRs, assigns tasks to sub-agents, and synthesizes a final report.
No complex webhooks to manage. Ghostwriter installs as a GitHub App or runs directly via GitHub Actions.
name: DevOps Ghostwriter on: pull_request: types: [opened, synchronize] jobs: audit: runs-on: ubuntu-latest steps: - name: Run Ghostwriter Agent uses: ghostwriter/agent-action@v2 with: api-key: ${{ secrets.GHOSTWRITER_KEY }} enable-runtime: true