Tag

#code-review

Tagged “code-review”

7 articles

GitLab wires Anthropic's Claude security tooling into its pipeline via MCP

GitLab has published its take on how Anthropic's Claude security tooling hands work off to the GitLab pipeline through the GitLab MCP server. The division of labour is tidy on a slide and messier the moment you draw the trust boundary.

Aug 8, 2026 · Tomás Vega Developer experience

The pull request is twenty, and moving review upstream is the shift I keep quietly rooting for

The New Stack argues code review should move upstream of the code itself, calling the pull request roughly twenty years old and asking whether the diff is still the right venue to catch a problem. After a year of my best reviews happening in shared docs before any branch existed, I mostly agree.

Jul 26, 2026 · Priya Nair Developer experience

Copilot code review picks up a firewall, custom runners, and head-branch instructions

GitHub's Copilot code review can now run with a firewall, custom setup steps and independent runner configurations, and custom instructions are read from the pull request's head branch rather than the base branch.

Jul 25, 2026 · Priya Nair Code quality & testing

GitLab Duo Security Review Flow goes after the logic bugs SAST leaves on the floor

GitLab moved Security Review Flow into public beta on the Duo Agent Platform. You add it to a merge request like a human reviewer, and it focuses on authorization and business-logic bugs that pattern-based scanners typically miss.

Jul 17, 2026 · Priya Nair Code quality & testing

Lightrun brings production impact into the PR review, and the merge gate gets more interesting

Lightrun added a capability that assesses a pull request's likely production impact before merge, joining a small category of tools that pull runtime context into code review. A step forward for PR review as a real signal, with some honest caveats about what 'runtime-aware' actually delivers today.

Jul 6, 2026 · Priya Nair Security & supply chain

Kubernetes will let you write patches with AI. It will not let you hide it.

The Kubernetes project published an AI contribution policy on June 26, 2026 that bans AI co-author trailers, requires PR descriptions to disclose generative-AI assistance, and tells maintainers to close PRs whose authors cannot explain the code in person. For any project taking community patches, it is a usable template.

Jun 30, 2026 · Tomás Vega Platform engineering

Cursor unveils Origin, an agent-first Git host; GitLab and Zed take other paths

Graphite co-founder Tomas Reimers unveiled Origin, a Git-compatible code host built from the ground up for AI agents, at an invite-only Cursor conference. GitLab and Zed are pursuing different rebuilds of the same model.

Jun 22, 2026 · Maya Okonkwo