How Kodus automates code review
Once connected, Kodus automatically reviews every pull request. It analyzes code for security vulnerabilities, performance issues, error handling, maintainability, and your custom rules — then posts comments directly in the PR.Supported platforms
- GitHub — via GitHub App
- GitLab — via OAuth + webhooks
- Bitbucket — via webhooks
- Azure DevOps — via webhooks
What gets analyzed
By default, Kodus checks for:- Security issues (SQL injection, XSS, hardcoded secrets)
- Performance problems (N+1 queries, missing indexes)
- Error handling gaps
- Potential bugs (null pointers, resource leaks)
- Code style and maintainability
- Your custom Kody Rules
- Business logic compliance (validates against linked task requirements)
Review cadence options
| Mode | Behavior |
|---|---|
| Automatic | Reviews every push — continuous feedback |
| Auto-pause | Pauses during rapid pushes (e.g., 3 in 15 minutes) to avoid noise |
| Manual | Only reviews when you comment @kody start-review |
Getting started
- Create a workspace at kodus.io or self-host Kodus
- Connect your Git provider (GitHub, GitLab, Bitbucket, or Azure DevOps)
- Select which repositories to monitor
- Open a PR — Kodus reviews it automatically