master-code-review

Security code review for a Python FastAPI project is automated by detecting the framework, loading specific security specifications, and executing a structured analysis. It combines general code quality checks with policy-driven vulnerability analysis to generate a CODE-REVIEW.md file.

Policy-driven vulnerability analysis in a code review applies predefined security specifications to identify injection flaws, secrets exposure, and improper authentication. It integrates these targeted security checks with standard code quality assessments during the review process.

This code review tool currently supports Python, FastAPI, and LLM or agentic patterns, with provisions for future framework integrations. It detects the project language and framework automatically to apply the relevant security specifications.

To generate a structured code review report with security findings, run the review process in your project directory. It outputs a detailed CODE-REVIEW.md file that combines general code quality assessment results with a dedicated section for security vulnerabilities.

The best way to check for secrets exposure and authentication flaws before a pull request is to run an automated security-aware code review. It applies specific security specifications to detect common vulnerabilities alongside general code quality checks.

Yes, you can use this for DevOps vulnerability analysis by running it in the current directory of your existing codebase. It detects the project type, applies security specs, and outputs findings to a CODE-REVIEW.md file for integration into your workflow.