requesting-code-review

Pre-commit code review involves verifying staged Git changes before they land by applying static security scans and baseline quality gates. It prevents risky commits from reaching main branches by detecting hardcoded secrets and enforcing standards early.

Pre-commit checks can auto-fix common security issues like hardcoded secrets and unsafe deserialization using a safe auto-fix loop. This reduces manual rework by automatically resolving detected vulnerabilities during the static scan without introducing new problems.

Baseline-aware quality gates compare staged changes against project baselines to ensure standards are met before commit or push. This prevents quality regressions by blocking code that falls below the established project baseline.

The independent reviewer subagent provides impartial code review before commit by adding an automated, neutral review step. Triggered after initial staged changes, it independently verifies security and quality without human bias.

Automated pre-commit static security scans are limited to detecting known patterns like hardcoded secrets and unsafe deserialization in staged changes. They rely on safe auto-fix loops that strictly avoid introducing new issues during automated remediation.