.env.example

# =============================================================================
# AutoCodeScan — environment configuration
# Copy this file to .env and fill in the values.
# =============================================================================

# -----------------------------------------------------------------------------
# GitHub
# -----------------------------------------------------------------------------
# Personal access token used to fetch PR data and post review comments.
# Required scopes: `repo`, `write:discussion`.
GITHUB_TOKEN=ghp_your_personal_access_token

# Shared secret for HMAC verification of inbound webhook requests.
# Configure the same value in the GitHub repository's webhook settings.
# When unset, the agent falls back to development mode (no verification).
GITHUB_WEBHOOK_SECRET=your_webhook_secret_here


# -----------------------------------------------------------------------------
# Azure OpenAI
# -----------------------------------------------------------------------------
AZURE_OPENAI_ENDPOINT=https://your-resource.openai.azure.com/
AZURE_OPENAI_KEY=your_azure_openai_key

# IMPORTANT — REPRODUCIBILITY:
# Pin the deployment names you ran experiments against and treat changes
# to these values as a methodology change. Evaluation results in
# `reports/` are not portable across model versions or embedding versions:
# updating a deployment name implicitly invalidates prior results.
# When you re-pin, re-run the full evaluation suite and note the change
# in EVALUATION.md's "Methodology change log".
AZURE_OPENAI_DEPLOYMENT=gpt-4
AZURE_EMBEDDING_DEPLOYMENT=text-embedding-ada-002