DevOps
Kiro CLI PR Review in CI: A Read-Only Setup
Kiro CLI can run one prompt without a terminal, so it can review each pull request in GitHub Actions and post a comment. It needs an API key stored as a secret and explicit tool trust, since a headless run denies tool calls nobody approved. Keep the reviewer read-only, treat the diff as untrusted text, and skip fork pull requests.