
Security News
Feross on the 10 Minutes or Less Podcast: Nobody Reads the Code
Socket CEO Feross Aboukhadijeh joins 10 Minutes or Less, a podcast by Ali Rohde, to discuss the recent surge in open source supply chain attacks.
pr-assist
Advanced tools
KhulnaSoft PR-Assistant aims to help efficiently review and handle pull requests, by providing AI feedbacks and suggestions.
See the Installation Guide for instructions on installing PR-Assistant on different platforms.
See the Usage Guide for instructions on running PR-Assistant tools via different interfaces, such as CLI, PR Comments, or by automatically triggering them when a new PR is opened.
See the Tools Guide for a detailed description of the different tools, and the available configurations for each tool.
Check out the new PR-Assistant Code Fine-tuning Benchmark
We released a new version of PR-Assistant Chrome extension, with two new features:
See more here
Check out KhulnaSoft new project, Coverage-Ai, that can automatically generate qualified tests to enhance existing test suites, aiming to increase code and behavior coverage efficiently.
Supported commands per platform:
| GitHub | Gitlab | Bitbucket | Azure DevOps | ||
|---|---|---|---|---|---|
| TOOLS | Review | ✅ | ✅ | ✅ | ✅ |
| ⮑ Incremental | ✅ | ||||
| ⮑ SOC2 Compliance 💎 | ✅ | ✅ | ✅ | ✅ | |
| Describe | ✅ | ✅ | ✅ | ✅ | |
| ⮑ Inline File Summary 💎 | ✅ | ||||
| Improve | ✅ | ✅ | ✅ | ✅ | |
| ⮑ Extended | ✅ | ✅ | ✅ | ✅ | |
| Ask | ✅ | ✅ | ✅ | ✅ | |
| ⮑ Ask on code lines | ✅ | ✅ | |||
| Custom Prompt 💎 | ✅ | ✅ | ✅ | ✅ | |
| Test 💎 | ✅ | ✅ | ✅ | ||
| Reflect and Review | ✅ | ✅ | ✅ | ✅ | |
| Update CHANGELOG.md | ✅ | ✅ | ✅ | ✅ | |
| Find Similar Issue | ✅ | ||||
| Add PR Documentation 💎 | ✅ | ✅ | ✅ | ||
| Custom Labels 💎 | ✅ | ✅ | ✅ | ||
| Analyze 💎 | ✅ | ✅ | ✅ | ||
| CI Feedback 💎 | ✅ | ||||
| Similar Code 💎 | ✅ | ||||
| USAGE | CLI | ✅ | ✅ | ✅ | ✅ |
| App / webhook | ✅ | ✅ | ✅ | ✅ | |
| Tagging bot | ✅ | ||||
| Actions | ✅ | ✅ | |||
| CORE | PR compression | ✅ | ✅ | ✅ | ✅ |
| Repo language prioritization | ✅ | ✅ | ✅ | ✅ | |
| Adaptive and token-aware file patch fitting | ✅ | ✅ | ✅ | ✅ | |
| Multiple models support | ✅ | ✅ | ✅ | ✅ | |
| Static code analysis 💎 | ✅ | ✅ | ✅ | ✅ | |
| Global and wiki configurations 💎 | ✅ | ✅ | ✅ | ✅ | |
| PR interactive actions 💎 | ✅ |
‣ Auto Description (/describe): Automatically generating PR description - title, type, summary, code walkthrough and labels.
‣ Auto Review (/review): Adjustable feedback about the PR, possible issues, security concerns, review effort and more.
‣ Code Suggestions (/improve): Code suggestions for improving the PR.
‣ Question Answering (/ask ...): Answering free-text questions about the PR.
‣ Update Changelog (/update_changelog): Automatically updating the CHANGELOG.md file with the PR changes.
‣ Find Similar Issue (/similar_issue): Automatically retrieves and presents similar issues.
‣ Add Documentation 💎 (/add_docs): Generates documentation to methods/functions/classes that changed in the PR.
‣ Generate Custom Labels 💎 (/generate_labels): Generates custom labels for the PR, based on specific guidelines defined by the user.
‣ Analyze 💎 (/analyze): Identify code components that changed in the PR, and enables to interactively generate tests, docs, and code suggestions for each component.
‣ Custom Prompt 💎 (/custom_prompt): Automatically generates custom suggestions for improving the PR code, based on specific guidelines defined by the user.
‣ Generate Tests 💎 (/test component_name): Generates unit tests for a selected component, based on the PR code changes.
‣ CI Feedback 💎 (/checks ci_job): Automatically generates feedback and analysis for a failed CI job.
‣ Similar Code 💎 (/find_similar_component): Retrieves the most similar code components from inside the organization's codebase, or from open-source code.
Try the GPT-4 powered PR-Assistant instantly on your public GitHub repository. Just mention @KhulnaSoft-Agent and add the desired command in any PR comment. The agent will generate a response based on your command.
For example, add a comment to any pull request with the following text:
@KhulnaSoft-Agent /review
and the agent will respond with a review of your PR
To set up your own PR-Assistant, see the Installation section below.
Note that when you set your own PR-Assistant or use KhulnaSoft hosted PR-Assistant, there is no need to mention @KhulnaSoft-Agent .... Instead, directly start with the command, e.g., /ask ....
PR-Assistant Pro is a hosted version of PR-Assistant, provided by KhulnaSoft. It is available for a monthly fee, and provides the following benefits:
The following diagram illustrates PR-Assistant tools and their flow:

Check out the PR Compression strategy page for more details on how we convert a code diff to a manageable LLM prompt
A reasonable question that can be asked is: "Why use PR-Assistant? What makes it stand out from existing tools?"
Here are some advantages of PR-Assistant:
When using PR-Assistant Pro 💎, hosted by KhulnaSoft, we will not store any of your data, nor will we use it for training. You will also benefit from an OpenAI account with zero data retention.
For certain clients, KhulnaSoft-hosted PR-Assistant Pro will use KhulnaSoft’s proprietary models — if this is the case, you will be notified.
No passive collection of Code and Pull Requests’ data — PR-Assistant will be active only when you invoke it, and it will then extract and analyze only data relevant to the executed command and queried pull request.
FAQs
KhulnaSoft PR-Assistant aims to help efficiently review and handle pull requests, by providing AI feedbacks and suggestions.
We found that pr-assist demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Socket CEO Feross Aboukhadijeh joins 10 Minutes or Less, a podcast by Ali Rohde, to discuss the recent surge in open source supply chain attacks.

Research
/Security News
Campaign of 108 extensions harvests identities, steals sessions, and adds backdoors to browsers, all tied to the same C2 infrastructure.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.