Add Devin API GitHub Actions workflows

[devin-ai-integration]

Implement Devin API GitHub Action

Summary

This PR implements a complete GitHub Action for interacting with the Devin API, enabling automated creation and management of Devin sessions from GitHub workflows.

What's included:

• Composite Action (devin-action/action.yml): Defines 23 inputs and 4 outputs, supporting all Devin API endpoints
• Bash Implementation (devin-action/scripts/devin-api.sh): 400+ line script implementing 18 API actions with JSON payload construction, error handling, and response parsing
• Documentation (devin-action/README.md): Comprehensive usage guide with examples for all API operations
• Deployment Guide (devin-action/DEPLOYMENT.md): Instructions for testing, versioning, and publishing to GitHub Marketplace
• Example Workflow (devin-action/examples/example-workflow.yml): Sample workflow demonstrating basic usage

API Coverage:

• Sessions: create, list, get, send message, upload files, update tags
• Secrets: list, create, delete
• Knowledge: list, create, update, delete
• Playbooks: list, create, get, update, delete

Review & Testing Checklist for Human

⚠️ CRITICAL: This action has NOT been tested in a real workflow yet because the repository is currently private, which prevents workflows from accessing it.

• Make repository public - Required for workflows to access the action (see issue in BankingMicroservices PR Fix workflows to use stable @main action reference #22)
• Test basic session creation - Verify the action can create a Devin session using the example workflow
• Security review of bash script - Check for:
  • Proper secret handling (no logging/exposure of API keys)
  • Input validation to prevent injection attacks
  • Secure JSON payload construction with proper escaping
• Verify API call correctness - Compare bash script's API calls against Devin API documentation for:
  • Correct endpoint URLs and HTTP methods
  • Proper request body structure for each action
  • Correct header handling (Authorization, Content-Type)
• Test error handling - Verify the action fails gracefully with clear error messages for:
  • Invalid API key
  • Missing required inputs
  • API errors (rate limits, invalid parameters)

Recommended Test Plan

1. Make DEVIN-GITHUB-ACTIONS repository public
2. Create a test workflow in a repository that uses this action:

   - uses: samfert-codeium/DEVIN-GITHUB-ACTIONS/devin-action@main
     with:
       action: 'create-session'
       api-key: ${{ secrets.DEVIN_API_KEY }}
       prompt: 'Test session'
       title: 'Test'

3. Verify session is created successfully at the returned URL
4. Test sending a message to the session
5. Test error cases (invalid API key, missing inputs)
6. Review CI logs for any security concerns (leaked secrets, etc.)

Notes

Known Issue: The repository is currently private, which blocks workflows from using the action. This causes the "Unable to resolve action" CI errors seen in BankingMicroservices PR #21 and #22. Making the repository public will resolve this.

Implementation Approach: Used composite action with bash script rather than TypeScript/Node.js to minimize dependencies and simplify distribution. Trade-off is that bash is more error-prone for complex logic.

Session Link: https://app.devin.ai/sessions/8fd0bbe89bdf48e79b4caa52bb28ad82
Requested by: @samfert-codeium (Sam Fertig)

[devin-ai-integration]

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

• Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
• Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

• Disable automatic comment and CI monitoring