blast-radar/blastradar-action

BlastRadar is a GitHub Action, a small automated check that runs whenever someone opens a pull request on GitHub. It looks at the code changes in that pull request and gives them a risk score from 1 to 10, estimating how risky the change might be if it were released to production. If the score is too high, the check can block the pull request from being merged. Setting it up means adding a short configuration file to a repository's workflows folder that tells GitHub to run BlastRadar every time a pull request is opened. The action needs an Anthropic API key, stored as a secret in the repository settings, since it uses an AI model to analyze the code changes. There is also an optional setting called threshold, which defaults to 7, that controls the risk score at which the check fails. Once configured, the action produces two outputs for each pull request: the numeric risk score itself, and a one line verdict summarizing why that score was given. The project also has a companion website where anyone can paste in a code diff directly and get a risk score back in about ten seconds, without needing to set up the GitHub Action at all. The README for this project is fairly brief and does not go into detail about how the risk scoring itself works internally, what specific factors raise or lower a score, or what license the project is released under. The team behind it lists an email address for feedback.