Reviewing Pull Requests with AI Agents

ai pr summary --pr-id 1234 --output-format markdown

// Copilot highlights potential security issue
const userInput = req.body.input;
// <Copilot suggestion>
// Potential XSS vulnerability: userInput is directly used in HTML
// </Copilot suggestion>

// Copilot suggests better approach
const sanitizedInput = sanitize(userInput);
res.render('page', { content: sanitizedInput });

const securityScanner = new AISecurityAgent();
const findings = securityScanner.analyzePRChanges(changes);
console.log(findings);

// Before
function calculateTotal(items) {
  let total = 0;
  for (let i = 0; i < items.length; i++) {
    total += items[i].price;
  }
  return total;
}

// After
const calculateTotal = (items) => items.reduce((sum, item) => sum + item.price, 0);

git commit -m "feat(auth): implement JWT token generation for user login"

const aiPrDescription = {
  summary: "Refactor user authentication module to use JWT tokens",
  changes: [
    "Updated login endpoint to return JWT token",
    "Modified middleware to validate JWT tokens"
  ],
  risks: [
    "Potential breaking change for existing clients",
    "Increased complexity in token refresh logic"
  ]
};

// Before
const myFunction = (param1, param2) => { return param1 + param2; };

// After (resolved by AI)
const myFunction = (param1, param2) => {
  return param1 + param2;
};

// Before
const userInput = req.body.input;
const query = `SELECT * FROM users WHERE name = '${userInput}'`;

// After (resolved by AI)
const userInput = req.body.input;
const query = `SELECT * FROM users WHERE name = ?`;
const result = await db.query(query, [userInput]);

{
  "rules": [
    {
      "name": "No hardcoded secrets",
      "description": "Prevent sensitive data in code",
      "pattern": "SECRET_|API_KEY_|PASSWORD_",
      "severity": "error"
    },
    {
      "name": "Use of deprecated methods",
      "description": "Flag usage of outdated APIs",
      "pattern": "oldMethod\\(",
      "severity": "warning"
    }
  ]
}