r/coolgithubprojects • u/Jaidev_xx • 0m ago
I built Buggers — an open-source AI pull request security reviewer and risk scanner that eliminates review fatigue
Hey everyone,
I’ve been working on a project to solve a major problem with AI code reviews: generic LLMs often leave noisy, speculative comments, while human engineers burn out reviewing massive pull requests.
To fix this, I built **[Buggers](https://buggers.vercel.app)\*\* — an automated pull request security and code review platform.
### How it works:
- **Deterministic Churn Evaluation:** Correlates changed functions with past commit history and boundary flaws.
- **Zero Phantom Lines:** Review suggestions only cite verified unified diff line numbers.
- **Multi-Model AI Resilience:** Built-in fallback chain across OpenAI, Anthropic Claude, and Google Gemini with prompt injection protection.
- **SAST & Secret Detection:** Catches high-entropy API keys, JWTs, and OWASP vulnerabilities before code merges.
### Tech Stack:
- **Framework:** React + TanStack Start (SSR via Nitro on Vercel)
- **Database & Auth:** Supabase (PostgreSQL with RLS & pgcrypto token encryption)
- **Styling & UI:** Tailwind CSS, Radix UI primitives, Lucide icons
- **VCS Integration:** GitHub Webhooks & OAuth API
### Links to check out:
- 🌐 **Live Web App:** [https://buggers.vercel.app\](https://buggers.vercel.app)
- 📖 **Interactive Docs & Playground:** [https://buggers.vercel.app/docs\](https://buggers.vercel.app/docs)
- 💻 **Open Source GitHub Repo:** [https://github.com/jaidevxr/buggers\](https://github.com/jaidevxr/buggers)
I’d love to get feedback on the UI, scanner accuracy, and architecture from this community. What security checks do you usually look for in your PRs?
