Open source code review tools fall into two groups, and search results often mix them. Open source code review tools for GitHub run inside pull requests you already have: a GitHub Action or a CLI post
A practical 10-PR checklist for choosing an AI pull request reviewer: where its rules come from, whether it can stop a merge, and where your code goes.
To run AI security code review on GitHub pull requests without drowning in false alarms, run deterministic rules first for hard stops (secrets, removed CI safety guards, and protected paths), then use
A practical setup with base-branch rules, protected paths, and an open-source GitHub Action so coding agents can't loosen their own review.