Skip to main content

Set up PR review

Enable automated security review for pull requests on a project. Each pull request receives an AI-driven security audit with inline comments and fix suggestions.

Prerequisites​

Steps​

  1. Connect your VCS. In Integrations, connect GitHub or GitLab and grant access to the repositories you want to review. Ensure the GitHub App or GitLab integration has pull request webhook permissions for the target repository.
  2. Create a project. In Projects, create a new project and select the connected repository as its source. The project becomes the continuous security entity for the repository and owns a living knowledge base.
  3. Enable PR review. Open the project, go to the PR Review tab or settings section, and toggle Enable PR review. Optionally configure which branches to review and the severity threshold for comments.

PR review is now active. The next pull request against the repository triggers an automated security review.

Verify with a test PR​

  1. Create a branch and introduce a deliberate vulnerability, such as an SQL injection in a query.
  2. Open a pull request.
  3. Within a few minutes, AISafe posts inline comments identifying the vulnerability and suggesting a fix.

If a pull request does not trigger a review, check the project's Source tab and the delivery log. See How it works for how to diagnose a missed event.

Next steps​