differential-review

Spot security regressions in a git diff by analyzing code additions that introduce vulnerabilities and removals that disable protections, generating a prioritized risk report for remediation.

Review pull requests for vulnerabilities by applying diff-focused risk detection to patch sets and commit ranges, which classifies changed files by risk tier and highlights unsafe changes.

This security review works with semgrep as optional tooling for pattern matching on code additions, applying it across languages to identify unsafe changes introduced in pull requests.

Analyze patch sets for disabled security protections by evaluating code removals within the diff, which detects when existing safeguards are weakened or deleted during modifications.

Assess dependency changes for security risks by running incident-driven diff analysis on commit ranges, evaluating added patterns against known vulnerabilities to produce actionable remediation steps.

You need a local repository context and a diff source to detect unsafe code changes, as the analysis requires access to patch sets and commit ranges to identify security regressions.