How Kodus automates code review
Once connected, Kodus automatically reviews every pull request. It analyzes code for security vulnerabilities, performance issues, error handling, maintainability, and your custom rules — then posts comments directly in the PR.Supported platforms
- GitHub — via GitHub App (or a personal access token)
- GitLab — via OAuth (or a personal access token)
- Bitbucket — via API token
- Azure DevOps (Azure Repos) — via personal access token
- Forgejo — via personal access token
What gets analyzed
By default, Kodus checks the categories you can switch on or off in Code review → What to review, plus your own rules:- Security issues (SQL injection, XSS, hardcoded secrets)
- Performance problems (N+1 queries, missing indexes)
- Potential bugs (null pointers, resource leaks, error handling gaps)
- Business logic compliance (validates against linked task requirements)
- Your custom Kody Rules (use them for code style and team conventions)
Review cadence options
Set the cadence in Code review → General under Enable Automated Code Review → Review Cadence.Getting started
- Create a workspace at kodus.io or self-host Kodus
- Connect your Git provider (GitHub, GitLab, Bitbucket, Azure DevOps, or Forgejo)
- Select which repositories to monitor
- Open a PR — Kodus reviews it automatically