Skip to main content

Pull Request Review

Pull Request Review (PR Review) is AISafe's automated security review for pull requests. When enabled on a Project, each PR against a selected connected repository gets a focused security audit of the changed paths. The agent posts inline comments with severity ratings and fix suggestions directly on the PR, so developers get security feedback inside their existing code review workflow.

What it does​

  • Monitors pull requests on a project's connected GitHub and GitLab repositories.
  • Pins the PR's exact base and head commits and analyzes the changed files with the repository context loaded for that run.
  • Uses prior project audit knowledge when available; a baseline code audit is not required.
  • Posts a review on the PR with inline comments on specific lines, severity ratings, and suggested fixes.

AISafe does not review Bitbucket pull requests yet. A Bitbucket connection still gives a project its source, its assessments and its scans. See Bitbucket.

What it is not​

PR Review is not a full assessment. It reviews only the changed paths of a pull request, not the whole codebase. For a complete audit of your code, use Source Code Audit. To understand the difference, see Code audit.

Chapters​

Next steps​