How to set up AI code review on GitHub

Install and configure Fossa for GitHub repositories to get automated AI code review on every pull request.

Setting up Fossa on GitHub takes a few minutes. Once connected, every pull request gets reviewed automatically.

Steps

1. Create an account at fossa.local or self-host Fossa
2. Connect GitHub — install the Fossa GitHub App when prompted during setup
3. Select repositories — choose which repositories Fossa should review
4. Open a PR — Fossa reviews it automatically and posts comments

What you get

• Automated reviews on every PR (or on-demand with @fossy start-review)
• Comments posted directly in the PR with code suggestions
• Customizable rules, severity filters, and suggestion limits
• Business logic validation against linked tasks

Custom configuration

Drop a fossa-config.yml in your repo root to customize behavior per repository. The file overrides web settings automatically.

Using a Personal Access Token

For private repositories or organizations with stricter permissions, you may need to configure a GitHub Personal Access Token (PAT).

For the full setup guide, see Quickstart and GitHub App setup.