SpyBara
Go Premium

use-cases/github-code-reviews.md 2026-06-09 18:50 UTC to 2026-06-10 20:00 UTC

25 added, 85 removed.

2026
Sat 13 00:58 Fri 12 18:02 Thu 11 20:02 Wed 10 20:00 Tue 9 18:50 Sat 6 00:58 Fri 5 18:45 Thu 4 01:09 Wed 3 19:27 Tue 2 19:22

name: Review GitHub pull requests tagline: Catch regressions and potential issues before human review. summary: Use Codex code review in GitHub to automatically surface regressions, missing tests, and documentation issues directly on a pull request. skills:

  • token: $security-best-practices url: https://github.com/openai/skills/tree/main/skills/.curated/security-best-practices description: Focus the review on risky surfaces such as secrets, auth, and dependency changes. bestFor:
  • Teams that want another review signal before human merge approval
  • Large codebases for projects in production starterPrompt: title: Ask Codex to review a pull request body: "@codex review for security regressions, missing tests, and risky behavior changes." suggestedModel: cloud relatedLinks:
  • label: Codex code review in GitHub url: /codex/integrations/github
  • label: Custom instructions with AGENTS.md url: /codex/guides/agents-md

How to use

Start by adding Codex code review to your GitHub organization or repository. See Codex code review in GitHub for more details.

You can set up Codex to automatically review every pull request, or you can request a review with @codex review in a pull request comment.

If Codex flags a regression or potential issue, you can ask it to fix it by commenting on the pull request with a follow-up prompt like @codex fix it.

This will start a new cloud task that will fix the issue and update the pull request.

Define review guidance

To customize what Codex reviews, add or update a top-level AGENTS.md with a section like this:

## Review guidelines

- Flag typos and grammar issues as P0 issues.
- Flag potential missing documentation as P1 issues.
- Flag missing tests as P1 issues.
  ...

Codex applies guidance from the closest AGENTS.md to each changed file. You can place more specific instructions deeper in the tree when particular packages need extra scrutiny.