AI security code review

Learn how to set up and configure AI security code review for your projects
Beta

AI security code review provides automated code review capabilities using artificial intelligence to identify potential security issues in your codebase.

After you set up AI security code review, creating a pull request triggers an Endor Labs scan on the diff. Endor Labs sends the scan data to an AI model to produce a security analysis and generates a report.

You can view the report in the Endor Labs user interface. You can also enable pull request comments to get a comment on your GitHub pull request with the details of the AI security code review.

The following sections provide information on how to set up AI security code review, customize a scan profile, and view the AI security code review results.

Prerequisites

Verify the prerequisites for AI security code review.

Set up AI security code review

Learn how to set up AI security code review with GitHub App.

View AI security code review results

Learn how to view the AI security code review results.

PR Comments for AI Security Review

Learn how AI security code review PR comments work and how to interpret them.

AI security code review dashboard

Learn how to view AI security code review dashboard.

AI security code review with endorctl

Use endorctl and GitHub environment variables for AI security code review.