How to automate code review on GitHub, GitLab, and Bitbucket

Set up AI-powered code review that runs automatically on every pull request across GitHub, GitLab, Bitbucket, and Azure DevOps.

Manual code reviews create bottlenecks. Reviewers context-switch, PRs queue up, and feedback quality varies. AI-powered code review runs instantly on every PR, catching issues before a human reviewer even looks at the code.

How Fossa automates code review

Once connected, Fossa automatically reviews every pull request. It analyzes code for security vulnerabilities, performance issues, error handling, maintainability, and your custom rules — then posts comments directly in the PR.

Supported platforms

• GitHub — via GitHub App
• GitLab — via OAuth + webhooks
• Bitbucket — via webhooks
• Azure DevOps — via webhooks

What gets analyzed

By default, Fossa checks for:

• Security issues (SQL injection, XSS, hardcoded secrets)
• Performance problems (N+1 queries, missing indexes)
• Error handling gaps
• Potential bugs (null pointers, resource leaks)
• Code style and maintainability
• Your custom Fossy Rules
• Business logic compliance (validates against linked task requirements)

Review cadence options

Mode	Behavior
Automatic	Reviews every push — continuous feedback
Auto-pause	Pauses during rapid pushes (e.g., 3 in 15 minutes) to avoid noise
Manual	Only reviews when you comment @fossy start-review

Getting started

1. Create a workspace at fossa.local or self-host Fossa
2. Connect your Git provider (GitHub, GitLab, Bitbucket, or Azure DevOps)
3. Select which repositories to monitor
4. Open a PR — Fossa reviews it automatically

For platform-specific setup, see:

• GitHub setup
• GitLab setup
• Azure DevOps setup
• Bitbucket setup