> For the complete documentation index, see [llms.txt](https://docs.devarmor.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.devarmor.com/modules/code-reviewer.md).

# Code Reviewer

Automated security review of every pull request.

DevArmor's Code Review module automatically reviews every new pull request and suggests security improvements, correlating code changes with your design review results and flagging deviations from approved design patterns and security requirements.

To use Code Review, you don't need to change your workflow. DevArmor runs as a check in your GitHub check suite for every new PR and PR update, and posts results as a single consolidated comment showing each control's status, impact, and remediation together — with irrelevant checks hidden.

A review comment includes:

* A plain-English summary of the changes
* Clear explanations of each finding's impact
* Fix guidance that includes a code example

If DevArmor finds a potential improvement it can implement directly, it opens a separate pull request and links to it from the review comment — follow the link to review the proposed changes.

## Re-running a review

Comment **"@devarmor review"** on a pull request to re-run its security review at any time. DevArmor reacts with an emoji to acknowledge the request before starting.

## AI Guardrails

Beyond reviewing pull requests, Code Review's underlying policies can generate rule files for AI coding assistants like Cursor and Augment Code — see [AI Guardrails](/modules/code-reviewer/ai-guardrails.md).