Created an automated PR reviewer bot that runs as soon as a PR is created for a repo. The tool runs as a Github app that is given repo level access, once a PR is created Github actions runs the reviewer. Each line of code is sanitized for any security keys, PII or any other sensitive information before it is sent to an LLM. The LLM reviews the code on all security parameters, then creates a summary section of what the code is doing, categorizes issues into respective CVEs and writes review comments on the PR. This helps cut down time taken for QA. At the end, PR approval is done by a human in the loop.
Built with