🔍 Code Review Automation

Automated code review for GitHub pull requests using Claude LLM

Automatically analyze GitHub pull requests, provide intelligent code reviews, security scanning, and style checking using Claude AI.

✨ Features

• PR Listing - View all pull requests in a repository
• PR Details - Get comprehensive information about any PR
• File Changes - See exactly what files changed
• PR Search - Search PRs by keyword
• Repository Info - Get general repository statistics
• Claude Analysis - AI-powered code review using Claude LLM
• Code Quality Scoring - Automated quality assessment (0-100)
• Security Scanning - Automated security vulnerability detection
• Style Checking - Automated style and linting checks
• Full Review - Complete review with all checks
• Configurable - Custom rules via .reviewrc

🚀 Quick Start

1. Install Dependencies

uv pip install PyGithub anthropic rich typer python-dotenv

2. Setup GitHub API Token

Get your GitHub Personal Access Token:

1. Go to GitHub Settings → Developer settings → Personal access tokens
2. Generate a new token with repo scope
3. Create .env file:

GITHUB_TOKEN=your_github_pat_here

3. Review Pull Requests

# List open PRs
code-review list-prs owner/repo

# Show PR details
code-review pr-info owner/repo 123

# Show files changed
code-review pr-files owner/repo 123

# Analyze PR with Claude AI
code-review review-pr owner/repo 123

📋 Commands

list-prs

List pull requests from a repository.

code-review list-prs owner/repo

Options:

• --state: PR state (open, closed, all) - default: open
• --limit: Maximum PRs to show - default: 10

pr-info

Show detailed information about a specific PR.

code-review pr-info owner/repo 123

Shows:

• Title and description
• Author and timestamps
• File change statistics
• Labels and merge status

pr-files

Show files changed in a PR.

code-review pr-files owner/repo 123

Shows:

• Changed files
• Status (added, modified, deleted)
• Additions and deletions per file

search-prs

Search pull requests by keyword.

code-review search-prs owner/repo --query "bug"

Options:

• --query: Search keyword (required)
• --state: PR state (open, closed, all) - default: open
• --limit: Maximum PRs to show - default: 10

repo-info

Show general repository information.

code-review repo-info owner/repo

Shows:

• Repository name and description
• Programming language
• Stars and forks count
• Open issues and PRs
• Creation and update dates

review-pr

Analyze a pull request using Claude AI.

code-review review-pr owner/repo 123

Shows:

• AI-powered code review
• Code quality score (0-100)
• Security considerations
• Best practices
• Specific recommendations

Requires:

• GITHUB_TOKEN in .env
• ANTHROPIC_API_KEY in .env

security-scan

Scan a pull request for security vulnerabilities.

code-review security-scan owner/repo 123

Detects:

• Exposed secrets (API keys, tokens, passwords)
• SQL injection vulnerabilities
• Command injection vulnerabilities
• Hardcoded credentials
• Weak cryptography (MD5, SHA1, RC4, DES)
• Unsafe deserialization (pickle)

Options:

• --config: Configuration file path

style-check

Check a pull request for style and linting issues.

code-review style-check owner/repo 123

Checks:

• Line length violations
• Naming convention violations
• Import order
• Blank lines
• Whitespace issues
• Missing docstrings

Options:

• --config: Configuration file path

full-review

Run full code review (LLM + Security + Style) on a pull request.

code-review full-review owner/repo 123

Combines:

• LLM analysis (code quality score)
• Security scanning
• Style checking

Options:

• --config: Configuration file path
• --skip-llm: Skip LLM analysis
• --skip-security: Skip security scan
• --skip-style: Skip style check

config-init

Initialize a default configuration file.

code-review config-init --output .reviewrc

Creates a .reviewrc file with customizable settings for:

小葱技能7w4.net有更新，你可以访问看下。

• Security scanning rules
• Style checking rules
• LLM analysis settings

🔧 Technical Details

GitHub API Integration

• Uses PyGithub library
• Authenticates with Personal Access Token
• Rate limit handled automatically

LLM Integration

• Claude API for code analysis
• Intelligent code review comments
• Context-aware suggestions
• Code quality scoring

Security Scanning

• Static analysis for common vulnerabilities
• Pattern-based detection
• Severity-based categorization
• Configurable rules

Style Checking

• PEP8 compliance checks
• Naming convention validation
• Line length enforcement
• Import order verification
• Whitespace checks

Configuration

• YAML/JSON config files
• Project-specific settings
• Customizable thresholds
• .reviewrc support

📊 Examples

# Run full review
code-review full-review facebook/react 34567

# Security scan only
code-review security-scan owner/repo 123

# Style check only
code-review style-check owner/repo 123

# AI analysis only
code-review review-pr owner/repo 123

# List all closed PRs
code-review list-prs owner/repo --state closed --limit 20

# Initialize config
code-review config-init

🔐 Security

• GitHub PAT stored in .env file (never committed)
• No secrets logged or displayed
• IP whitelist recommended

🚧 Roadmap

v0.2.0 - Claude Integration (Completed)

• Claude API integration
• Automated PR analysis
• Intelligent review comments
• Code quality scoring

v0.3.0 - Security & Style (Current)

• Security vulnerability scanning
• Style and linting checks
• Automated fix suggestions
• Configuration file support
• Full review command

v1.0.0 (Planned)

• Multi-platform support (GitLab, Bitbucket)
• CI/CD integration
• Team collaboration features
• Review dashboard

📄 License

MIT

🙋 Support

For issues or questions:

• Check the documentation
• Open an issue on GitHub

这个工具功能丰富，能自动审查 GitHub 代码请求，支持 AI 分析、安全扫描和代码风格检查。文档详细，安装配置相对简单。不过实际使用中扫描准确性还有提升空间，部分复杂代码问题可能检测不到。整体质量中上，适合需要频繁审查代码的开发者使用。