Sourcery

Description

Sourcery is an AI code review tool built for the pace of AI-driven development. As AI produces more code faster, it also produces more bugs, vulnerabilities, and tech debt than traditional peer reviews can keep up with, and Sourcery provides automated reviews designed for security and speed.

Sourcery reviews every pull request and continuously scans repositories for security issues, delivering high-signal, low-noise findings with clear summaries and fixes. It works where developers work: instant reviews with summaries on PRs, continuous security scans across repos, real-time feedback in IDEs like VS Code, Cursor, Windsurf, and JetBrains, and integration with coding agents to fix issues directly. It runs on GitHub, GitLab, GitHub Enterprise Server, and self-hosted GitLab.

Sourcery is trusted by many developers and is free to use for open-source projects, with paid plans for private repos, teams, and enterprises. It emphasizes security by design, with no training on your code, zero-retention options, the ability to bring your own LLM endpoints, and SOC 2 certification.

Sourcery's Core Features

• AI code reviews on every pull request

• Continuous security scanning across repositories

• Clear summaries, explanations, and suggested fixes

• IDE reviews in VS Code, Cursor, Windsurf, and JetBrains

• Integration with coding agents to fix issues

• Custom review rules

• No training on your code and zero-retention options

• Runs on GitHub, GitLab, and self-hosted GitLab

How to use Sourcery?

1. 1

   Install Sourcery: Connect it to your GitHub or GitLab, or install the IDE extension.

2. 2

   Open a pull request: Sourcery reviews the PR with a summary and line-by-line feedback.

3. 3

   Run security scans: Let it scan your repos for security issues with detailed explanations.

4. 4

   Fix issues: Apply suggested fixes with a click or via your coding agent.

5. 5

   Tune it: Add custom review rules and, on higher plans, bring your own LLM.

Sourcery's Use Cases

• Automated PR reviews
• Continuous security scanning
• IDE code review
• Keep up with AI code

FAQ from Sourcery

• What is Sourcery?

  Sourcery is an AI code review tool that reviews pull requests and scans repositories for security issues in GitHub, GitLab, or your IDE.

• Where can I use Sourcery?

  On pull requests, across repositories for security scans, in IDEs like VS Code, Cursor, Windsurf, and JetBrains, and alongside coding agents.

• Is Sourcery free for open source?

  Yes. Sourcery is free to use for open-source projects, with paid plans for private repos, teams, and enterprises.

• How does Sourcery handle security and privacy?

  It does not train on your code, offers zero-retention options with trusted providers, lets you bring your own LLM endpoints, and is SOC 2 certified.

• Which platforms does it run on?

  It runs on GitHub, GitLab, GitHub Enterprise Server, and self-hosted GitLab.

• Can I customize reviews?

  Yes. You can add custom review rules to enforce your code standards.