OpenClaw Read-only GitHub PR Review Workflow with Chat Notifications

This workflow sets up a read-only assistant that analyzes PRs and CI failures and posts actionable notifications to your team chat. Humans remain the only actors who write to the repository (comments, approvals, merges, reruns). The design emphasizes reproducibility, least privilege, and predictable operations.

Primary reference: the original OpenClaw PR review automation guide at zenvanriel.nl.

This version improves reproducibility by adding:

• A hardened, isolated runtime baseline from the official OpenClaw security guidance at docs.openclaw.ai
• Clear access control practices (pairing, mention-only in groups) from docs.openclaw.ai
• Supply-chain guardrails informed by recent public incidents around malicious skills and impersonation attempts reported by Tom's Hardware and TechRadar
• A pragmatic view on limitations for business use cases and team governance as discussed in eesel.ai