Tag
Ghostcommit is a novel supply chain exploit that uses malicious PNG images containing text instructions to bypass AI code reviewers, leading to data exfiltration from developer environments.
QodoAI released Cross Repo Review, an AI code review tool that can detect bugs across multiple repositories, going beyond single-repo analysis to catch issues caused by changes in one repo that break others.
The article argues that human code reviewers should use AI to handle large diffs, and instead contribute their out-of-distribution knowledge and high-level context.
Greptile introduces TREX, an AI code reviewer that executes code and detects runtime bugs, going beyond static analysis by spinning up parallel agents to investigate issues and generate artifacts like screenshots.
GitHub Copilot code review now supports custom agent skills and MCP server connections in public preview, allowing organizations to bring their own standards and context into code reviews.
Cursor's Bugbot code review tool is now over 3x faster, 22% cheaper, and finds 10% more bugs, with most runs finishing under three minutes. The update also adds new features like running reviews before pushing and only reviewing new changes.
Alibaba has open-sourced Open Code Review, an AI-powered CLI tool for code review that combines deterministic engineering with LLM agent capabilities. Originally an internal tool serving tens of thousands of developers and identifying millions of defects, it reads Git diffs and produces structured, line-level review comments using a configurable model endpoint.
A developer blog post argues against the idea of shipping AI-generated code to production without reading it, emphasizing that code review serves critical purposes: diffusing responsibility, reducing bus factor, and maintaining team knowledge of the codebase.
Cloudflare built a CI-native orchestration system for AI code review, using up to seven specialized agents managed by a coordinator to provide structured, accurate reviews across thousands of merge requests.
Graphbit PRFlow is an AI-powered code review agent designed to identify issues that human reviewers or other tools might miss.