Home / Guides / Cline

Cline code review in GitHub Actions

Updated July 4, 2026 · applies to pgup-ai/jbot-review-action v0

J-Bot Review runs Cline in your GitHub Actions runner to review pull requests. Use cline-pass for a Cline subscription or cline for pay-as-you-go credits. Setup takes a credential file and a workflow. J-Bot is MIT-licensed and adds no fee; your Cline usage and CI minutes are billed as usual.

Setup in three steps

1. Copy the credential. Run cline auth locally, then save the entire contents of ~/.cline/data/settings/providers.json as the repository secret CLINE_AUTH_JSON (Settings → Secrets and variables → Actions).
2. Commit the workflow. Add the file below as .github/workflows/jbot-review.yml — pick cline-pass (subscription) or cline (pay-as-you-go).
3. Open a pull request. Cline reviews the full diff on your runner without editing files. J-Bot checks the findings before posting review comments and a verdict.

name: J-Bot Code Review
on:
  pull_request: { types: [opened, reopened, ready_for_review, synchronize] }

concurrency:
  group: jbot-review-${{ github.event.pull_request.number }}
  cancel-in-progress: true

permissions:
  contents: read
  pull-requests: write
  issues: write        # PR reactions use the issues API
  checks: read

jobs:
  review:
    if: github.event.pull_request.draft == false
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v7
        with: { fetch-depth: 0 }
      - uses: pgup-ai/jbot-review-action@v0
        with:
          provider: cline-pass          # subscription; use `cline` for pay-as-you-go
          cline-auth: ${{ secrets.CLINE_AUTH_JSON }}
          github-token: ${{ secrets.GITHUB_TOKEN }}

What lands on the PR

• The review covers the full diff between the merge base and PR head. Comments point to the relevant changed lines. Cline runs with --plan --auto-approve false to keep the review read-only.
• Verification is on by default. J-Bot checks each finding and drops those the verifier refutes. If the verifier is unsure, the finding stays in the run diagnostics and isn't posted as a PR comment.
• J-Bot reads review guidelines from your repo: AGENTS.md, REVIEW.md, .coderabbit.yaml, greptile.json, Cursor rules.
• Context7 pulls current docs whenever the PR touches an external API or SDK.

Cost & privacy

• Cline charges your subscription (cline-pass) or credit balance (cline). GitHub Actions usage is billed separately.
• To choose a model, set model to cline-pass/glm-5.2 or cline/deepseek/deepseek-v4-flash. Leave it unset to use the default for your billing mode.
• J-Bot reads the auth token from providers.json. Store the file in an Actions secret. GitHub doesn't pass that secret to fork PRs in this workflow. Check your plan's terms for CI use.
• J-Bot skips model calls for PRs that only change documentation.

FAQ

Related