logoalt Hacker News

capikitoday at 4:54 PM1 replyview on HN

What about having the checklist and having an AI tool use it to catch things at review time (or even development time)?


Replies

tmoerteltoday at 5:00 PM

Having AI tools do the review against the checklist would probably prevent the problems. However, it would probably be substantially inferior as a teaching tool for your team. The exercise of having reviewers hunt the checklisted vulnerabilities for themselves is what develops the mental muscles needed to understand the vulnerabilities in depth and avoid them when designing and writing future code.

But, yes, I'd augment any manual review with a checklist and AI review as a final step. If the AI catches any problems then, your reviewers will be primed to think about why they overlooked them.

show 3 replies