Rendered at 20:21:08 GMT+0000 (Coordinated Universal Time) with Cloudflare Workers.
shaftway 1 days ago [-]
Both. AI code review is built-in, but there's always a second human in the loop.
I'm concerned that there are people pushing on the code generation front, the code reviewing front, and the laziness front. Eventually they're going to all meet in the middle, and there will be a significant number of engineers who are using AI to write and review the code, rubber stamp it, and push it into prod, with disasterous results.
ylynbuilds 10 hours ago [-]
It depends. Since I started coding with AI, I rarely review the code for my personal projects — I only run the code-review skill on critical features. But for internal company projects, we still run a strict code review tool, SonarQube, at build/release time to check code quality and security.
joshstrange 1 days ago [-]
Personal/side-business: Almost fully automated PR review flow. Local agents review before PR, Github Actions runs Codex/Claude to review the PR, if everything passes (Unit, e2e, lint, etc) then I merge. I'll review critical code paths if they are touched but that's not too often.
Day Job: Similar but more human-in-the-loop and we are still feeling out "what needs human review" and "agent review is good enough".
LLM reviews have shown me/us that they will catch more things (legit things and silly things, to be fair) than human reviewers. Human reviewers are very bad at seeing what's _not_ there. Yes, humans will catch some things that the LLM won't but it's normally only on very custom things we've done that the LLM isn't "trained" on. [0]
I think that as time goes on code reviews will be almost fully automated and humans will focus more on the plans before building, overviews of what was built, and other spec/diagram-type "artifacts" than looking at the actual code.
[0] For my side projects and even a little for work I've been trending in the "do it the way the LLM wants" not "force it into the shape you thought of" because it's easier for the LLM to write/maintain/"understand". Similar to how I don't tell an LLM "put a red button on the page here that does X", I give it the problem I'm trying to solve so that I don't "bias" it to the way I first thought of. I may force it to do it "my way" in the end but I find I get exposed to new ideas or new/different ways to solve my problem when I don't "lead the witness".
shanforge 12 hours ago [-]
Before coding agents, people generated code that was reviewable. Now, people generate entire features or 5K+ lines of changes in a single PR, fully introducing new functionality. We can’t defend ourselves against this and make production slow. But the only way forward is to start relying more on AI-based reviews.
Here’s the interesting part: each PR gets reviewed by more than 3 people, each from their own perspective. Based on the questions and the affected paths, the reviewer directs the agent to focus on different points. Someone who is already familiar with the codebase can also guide the agent in the right direction.
Recently, we also started automating UI reviews. The agent runs all the services, verifies the feature through the UI, takes screenshots, and uploads them directly to the GitHub PR. We call this UI Review. + Test coverage also improtant.
stikit 9 hours ago [-]
>>> each PR gets reviewed by more than 3 people
How does this work exactly -this is your current workflow? Which tools are you using . I assume you mean your human reviewers are using ai tools interactively and deciding which fixes the tools propose will be implemented ?
byra 9 hours ago [-]
Same as most others here, I think it depends so much on your use case.
The speed you're as able to move at with no to lightweight manual code reviews is just so much higher, but there are cases where broken code could mess up critical prod systems so I don't see how you'd get rid of human code reviews there just yet.
For personal usage I've found quick DeepSeek flash reviews a massive boon to finding obvious bugs though.
spottedmarley 1 days ago [-]
No code review here. I tried to make it a regular part of my work flow but, it didn't last. That being said, I'm a retired developer and everything I build are personal projects so the stakes are lower than for working developers. I retired just a year or two before AI coding agents came into existence so I never experienced using these tools in an actual workplace setting. Working must have a whole different vibe these days
sagabai 1 days ago [-]
I wonder how codebases for important products (not demos or short-living ones) end up without anyone reviewing the code. Some claim engineers should become more of "architects" and "designers", but not coders/reviewers anymore. Wish to hear people's stories, if much documentation and reviewing from the high-level only is enough to keep the project from becoming a failure
stikit 1 days ago [-]
If someone’s best practice,optimization or security check is that important, automate it. Automation is more scalable and consistent . It would make more sense to me to build purpose built agents to look for any patterns that matter. Yes, humans are needed to sanity check and design the agents and rules. Combine that with a well designed build and test harness , human code review seems to me to be obsolete.
dormitivegit 16 hours ago [-]
[dead]
4lx87 16 hours ago [-]
Automated code review rates each PR across various metrics. Above a certain threshold it is approved and merged. ~90% meet the threshold to be automatically approved.
gits997 1 days ago [-]
Not a code specific review - claude catches more than humans do.
But in cases where context lives in peoples heads, its hard for ai to know whats going on snd whats the main goal of this code chanhe.
if the context is given (or documented somewhere claude has access to) + context of company is not too big ti consume it, there is no use in human review imo.
wbnns 21 hours ago [-]
It depends on the areas of the codebase getting touched.
If something highly sensitive, yes, and in general, a tendency to review with more scrutiny on backend changes.
But for frontend, less and less every week.
ryanchants 1 days ago [-]
Increasingly not. We use CodeRabbit at work, which catches good stuff. And I have my own gauntlet that I run code through.
wow I think /review and /code-review just waste of token
stikit 21 hours ago [-]
what has your experience been and what are you using instead. Claude interactive agents are covered by the subscription fee so no api charges.
davedx 1 days ago [-]
Nope. I occasionally do human review of my own code and very occasionally of other peoples', but for the most part it's all 100% automated. I use Codex's Github code review integration and it does a pretty decent job of spotting P1's and P2's.
I'm concerned that there are people pushing on the code generation front, the code reviewing front, and the laziness front. Eventually they're going to all meet in the middle, and there will be a significant number of engineers who are using AI to write and review the code, rubber stamp it, and push it into prod, with disasterous results.
Day Job: Similar but more human-in-the-loop and we are still feeling out "what needs human review" and "agent review is good enough".
LLM reviews have shown me/us that they will catch more things (legit things and silly things, to be fair) than human reviewers. Human reviewers are very bad at seeing what's _not_ there. Yes, humans will catch some things that the LLM won't but it's normally only on very custom things we've done that the LLM isn't "trained" on. [0]
I think that as time goes on code reviews will be almost fully automated and humans will focus more on the plans before building, overviews of what was built, and other spec/diagram-type "artifacts" than looking at the actual code.
[0] For my side projects and even a little for work I've been trending in the "do it the way the LLM wants" not "force it into the shape you thought of" because it's easier for the LLM to write/maintain/"understand". Similar to how I don't tell an LLM "put a red button on the page here that does X", I give it the problem I'm trying to solve so that I don't "bias" it to the way I first thought of. I may force it to do it "my way" in the end but I find I get exposed to new ideas or new/different ways to solve my problem when I don't "lead the witness".
Here’s the interesting part: each PR gets reviewed by more than 3 people, each from their own perspective. Based on the questions and the affected paths, the reviewer directs the agent to focus on different points. Someone who is already familiar with the codebase can also guide the agent in the right direction.
Recently, we also started automating UI reviews. The agent runs all the services, verifies the feature through the UI, takes screenshots, and uploads them directly to the GitHub PR. We call this UI Review. + Test coverage also improtant.
How does this work exactly -this is your current workflow? Which tools are you using . I assume you mean your human reviewers are using ai tools interactively and deciding which fixes the tools propose will be implemented ?
The speed you're as able to move at with no to lightweight manual code reviews is just so much higher, but there are cases where broken code could mess up critical prod systems so I don't see how you'd get rid of human code reviews there just yet.
For personal usage I've found quick DeepSeek flash reviews a massive boon to finding obvious bugs though.
But in cases where context lives in peoples heads, its hard for ai to know whats going on snd whats the main goal of this code chanhe.
if the context is given (or documented somewhere claude has access to) + context of company is not too big ti consume it, there is no use in human review imo.
If something highly sensitive, yes, and in general, a tendency to review with more scrutiny on backend changes.
But for frontend, less and less every week.
https://github.com/jacquardlabs/gauntlet