Catch bugs before they merge
Sourcery catches logic errors, missed edge cases and security issues in your changes. It explains the issue and how to fix it.
AI code review
Banish your PR backlog
Catch bugs, understand changes and merge faster.
GitHub or GitLabTwo-minute installNo credit card needed
For teams that can’t afford to ship bugs
-
-
- U.S. Department of Justice
-
-
-
-
-
Instant reviews for your PRs
Sourcery reviews every pull request within minutes and posts a PR summary, review comments and suggested fixes.
Understand changes faster
Sourcery's PR summaries show you what changed and where to focus, whether the code came from your teammate or your coding agent.
Apply suggested fixes in one click
Sourcery writes the fix as a suggested change, which you can commit straight to your PR.
Auto-approve low-risk PRs
Sourcery approves your low-risk PRs with no blocking findings, so you can merge them as soon as CI passes.
Bugs you wouldn’t want merged
Real issues Sourcery prevented in open source pull requests.
Linux Foundation
16.7kprestodb/presto
DeltaColumnHandle.java
+@JsonProperty("id") Long id,
+@JsonProperty("phyicalName") String physicalName,
sourcery-aibotThe property name is misspelled, so Jackson serializes this field as phyicalName and breaks wire compatibility.
Addressed in edb560e
Nuitka
15.1kNuitka/Nuitka
Importing.py
+def prioritize(candidate):
+ decision, _reason = decideRecompileExtensionModules(candidate[0])
sourcery-aibotdecideRecompileExtensionModules is never imported in this module, so sorting any recognized module candidate raises NameError.
Addressed in caeaacf
django CMS
10.7kdjango-cms/django-cms
views.py
return fallback
+return urlunsplit(("", "", quote(parts.path), parts.query, parts.fragment))
sourcery-aibotquote() re-encodes an already-encoded path, so /foo%20bar/ becomes /foo%2520bar/ and corrupts valid redirects.
Addressed in 77e8cba
CNCF
7.1kkubevirt/kubevirt
client.go
+switch st.Code() {
+case codes.Unavailable, codes.DeadlineExceeded, codes.Canceled, codes.Aborted:
sourcery-aibotRetrying on codes.Canceled means retrying after the caller has already given up.
Addressed in 00418c4
Secure your codebase continuously
Find security issues in new changes and across your existing codebase.
Catch security issues in your PRs
Sourcery reviews changed code for vulnerabilities and explains its findings alongside the diff.
sourcery-aibotcriticalRemote code execution (RCE) from untrusted input evaluated by eval.
Find risks across your codebase
Scheduled scans flag exposed secrets, vulnerable code, misconfigured infrastructure and dependencies with known CVEs.
Open findings Critical High Medium Low
Your code, kept private
Sourcery uses your code only for the review.
Your code stays yours
Sourcery keeps no copy of your code after a review and never trains AI on it.
SOC 2 Type II compliant
An independent auditor verifies our security controls. Visit Trust Center.
Frequently asked questions
How much does Sourcery cost?
Pro is $12 per seat per month and Team is $24, billed annually. Open source is free.
Is there a free trial?
Yes. Every paid plan starts with a 14-day free trial for your whole organization, and you add a card only when you decide to stay.
Does Sourcery work with GitLab?
Yes. Sourcery reviews merge requests on GitLab.com and self-hosted (self-managed) GitLab on every plan. Sourcery also supports GitHub Enterprise Server.
Can Sourcery be self-hosted?
Yes. Enterprise runs Sourcery inside your own infrastructure, with priority support and invoice billing.
Which languages does Sourcery review?
Every programming language GitHub recognizes, including Python, TypeScript, Java, Go and Rust.
Is our code secure?
Sourcery uses your code only for the review and keeps no copy afterwards. Your code is never used to train any model, and Sourcery is SOC 2 Type II compliant.
Have another question? Email hello@sourcery.ai.
Banish your PR backlog
Try Sourcery on your next pull request.
GitHub or GitLabTwo-minute installNo credit card needed