Overview
Smart Code Reviewer is a GitHub App integrated directly into the Cellenza development workflow. It automatically reviews every pull request and provides inline comments with suggestions on code quality, security vulnerabilities, and compliance with internal coding standards.
Key Features
- Security scanning: Detects OWASP Top 10 vulnerabilities
- Style enforcement: Validates against team coding conventions
- Performance hints: Identifies N+1 queries, memory leaks, and inefficient algorithms
- Explanation mode: Provides detailed explanations of each suggestion
- Multi-language: Supports C#, Python, TypeScript, and Bicep/ARM
Technical Stack
- Runtime: Azure Functions (Node.js)
- AI Engine: Azure OpenAI GPT-4o with custom system prompts
- Integration: GitHub App Webhooks
- Storage: Azure Cosmos DB (review history)
How It Works
- Developer opens a pull request on GitHub
- The GitHub App sends the diff to the Azure Function
- GPT-4o analyzes the diff against configured rules
- Inline comments are posted directly on the PR
- Summary report added as a PR comment
Configuration
Configure review rules via .cellenza-review.yml in the root of your repository.