skills.rest
AgentSecOps
AgentSecOpsOFFICIAL
Explore all skills by this author →
GitHub

reviewdog

Aggregate security and quality tool results into pull request comments.

183|35|Updated Nov 19, 2025
Search Tags:#ci-cd#pull-request#inline-comments#security-review#multi-tool#reviewdog
One-click install
npx skills add https://github.com/AgentSecOps/SecOpsAgentKit --skill reviewdog
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: reviewdog
Source: https://github.com/AgentSecOps/SecOpsAgentKit/tree/main/skills/secsdlc/reviewdog
Command: npx skills add https://github.com/AgentSecOps/SecOpsAgentKit --skill reviewdog

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes assets (resource) and references (resource) components.

What problem does it solve?

Automates code review feedback by aggregating results from multiple security and quality tools into pull request comments.

Core Features & Use Cases

  • Aggregates findings from SAST scanners, linters, and formatters into unified code review comments
  • Posts inline annotations on pull requests across GitHub, GitLab, and other platforms
  • Supports diff-aware filtering and customizable reporting to enforce secure coding standards
  • Ideal for CI/CD pipelines that want automated security feedback during code review

Quick Start

Install reviewdog and configure it in your CI to start posting security findings on PRs.

Frequently Asked Questions about reviewdog

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security code review feedback on pull requests?▼

You can automate security code review by aggregating findings from multiple SAST scanners and linters into unified inline comments on pull requests, enabling diffs-aware reporting and policy enforcement during CI/CD workflows.

Can I post inline annotations from multiple linters and scanners in a single PR?▼

Yes, you can aggregate findings from multiple tools like Semgrep, Bandit, Hadolint, Checkov, Gitleaks, ShellCheck, and ESLint into unified inline PR annotations across GitHub, GitLab, and other platforms.

How do I filter scanner results to only show findings on changed lines in a pull request?▼

You can use diff-aware filtering to report only security and quality findings on changed lines, ensuring code review feedback stays relevant and reduces noise from pre-existing issues.

Does reviewdog work with GitHub and GitLab CI/CD pipelines?▼

Yes, reviewdog integrates with GitHub, GitLab, and other code hosting platforms to post automated security findings and inline annotations directly within your existing CI/CD pipelines.

What do I need to set up automated code review annotations in my CI?▼

You need reviewdog and git as core dependencies, plus optional scanners like Semgrep or Checkov. Configure them in your CI pipeline to start posting aggregated security findings on pull requests.

Related Skills

Explore More Software Engineering Skills→
camoneartcamoneart
5

sast-configuration

Configure Semgrep, SonarQube, and CodeQL for automated vulnerability detection in CI/CD pipelines.

Community
Advanced
christophevgchristophevg

github

Manage GitHub branches, pull requests, CI status, and issues via the GitHub CLI.

Community
Advanced
camoacamoa
32

code-quality-audit

Automate code quality and security audits for Drupal and Next.js projects.

Community
Advanced
JaimeJunrJaimeJunr
2

pr-review-canvas

Generate an interactive HTML walkthrough from a GitHub PR URL.

Community
Advanced