alibaba /open-code-review
Secure, fast, efficient, battle-tested at Alibaba's scale. Hybrid architecture code review tool: deterministic pipelines + LLM Agent, precise line-level comments, built-in multi-language ruleset (NPE, thread-safety, XSS, SQL injection), OpenAI & Anthropic compatible.
★ 49,752⑂ 3,665👁 143⑃ 1,150● 579▤ 144◈ 116
49,752
stars
+61+467+5,912
3,665
forks
143
watchers
1,150
prs
579
issues
144
releases
116
discussions
README
OpenCodeReview
English | 简体中文 | 日本語 | 한국어 | Русский
---
What is Open Code Review?
Open Code Review is an AI-powered code review CLI tool. It originated as Alibaba Group's internal official AI code review assistant — over the past two years, it has served tens of thousands of developers and identified millions of code defects. After thorough validation at massive scale, we incubated it into an open source project for the community. Simply configure a model endpoint to get started.
It reads Git diffs, sends changed files to a configurable LLM via an agent with tool-use capabilities, and generates structured review comments with line-level precision. The agent can read full file contents, search the codebase, inspect other changed files for context, and produce deep reviews — not just surface-level diff feedback. Beyond diff review, ocr scan reviews entire files for auditing unfamiliar codebases or directories that have no meaningful diff.
Visit the official website for more details.
!Highlights
Benchmark
Compared to general-purpose agents (Claude Code), Open Code Review achieves significantly higher Precision and F1 with the same underlying model, while consuming only ~1/9 of the tokens and completing reviews faster. Note that its Recall is lower than general-purpose agents — a deliberate trade-off favoring precision over noise.
A real-world code review benchmark built from 50 popular open-source repositories, 200 real Pull Requests, and 10 programming languages — cross-validated by 80+ senior engineers (1,505 annotated ground-truth issues).
Explore the AACR-Bench dataset on Hugging Face.
| Metric | What it measures | Why it matters |
|--------|-----------------|----------------|
| F1 | Harmonic mean of precision and recall | Best single number for overall review quality |
| Precision | Proportion of reported issues that are real defects | Higher = fewer false alarms to triage |
| Recall | Proportion of real defects that are found | Higher = fewer issues slip through review |
| Avg Time | Wall-clock time per review | Matters for CI pipeline latency |
| Avg Token | Total tokens consumed per review | Directly impacts API cost |
!Benchmark
Why Open Code Review?
The Problem with General-Purpose Agents
If you've used general-purpose agents like Claude Code with Skills for code review, you've likely encountered these pain points:
- Incomplete coverage — On larger changesets, agents tend to "cut corners," selectively reviewing only some files and missing others.
- Position drift — Reported issues frequently don't match the actual code location, with line numbers or file references drifting off target.
- Unstable quality — Natural-language-driven Skills are hard to debug, and review quality fluctuates significantly with minor prompt variations.
The root cause: a purely language-driven architecture lacks hard constraints on the review process.
Core DeTop issues
#470feat(allowlist): expand supported file types — language experts wanted34 comments · 2026-07-23#1020Wanted: Who is using Open Code Review? Please leave a comment!16 comments · 2026-08-20#746OCR扫描pom后结论中显示Java代码,扫描文件和分析对不上15 comments · 2026-08-06#1017svn11 comments · 2026-08-20#1743Proposal: ChatGPT-plan reviews in GitHub Actions through a user-run token broker8 comments · 2026-10-13#1704rules check功能可以不依赖git8 comments · 2026-10-11#1532Make MAX_COMPLETION_TOKENS configurable (hard-coded 16384)8 comments · 2026-09-22#709Near-duplicate comments in json output for agent8 comments · 2026-08-03
Discussions
#1870Show and tell: binding OCR results to the reviewed commit, and failing closed on partial reviews0 comments · 2026-11-07#1865怎么评价代码与需求意图的一致性1 comments · 2026-11-06#1843OCR 获取 bug 级别/类型统计,在 OCR 代码中新增对应的 telemetry 维度1 comments · 2026-10-29#1834各个团队都有自己的cr-skill,如何能够集成进去0 comments · 2026-10-26#1828同一个 commit 跑三次,文件分组每次都不一样,review 结果也不一样,这正常吗?1 comments · 2026-10-26#1814是否考虑更新/重做一个IDEA插件用以可视化操作0 comments · 2026-10-23#1813Every `ocr review` takes 15–30 min — how to reduce wall-clock time? (concurrency / tool-call budget?)1 comments · 2026-10-23#1754Workspace没有resume,有什么取舍?1 comments · 2026-10-15
Latest release
v1.13.6 v1.13.6 2026-11-05🚀 Features - feat(pages): showcase supported model providers (1862) - feat(lang): review Starlark files (1851) - feat(rules): add C review rules (1840) 🐛 Bug Fixes - fix(llm): preserve explicit false stream override (1531) - fix(action): only rewrite the bot's own summary comment (1560) Full Changelog: https://github.com/alibaba/open-code-review/compare/v1.13.5...v1.13.6
相关报道 (9)
blog.csdnopen-code-review:Git+CLI驱动的轻量级LLM代码审查代理2026-10-17blog.csdnopen-code-review:开源CLA检查机器人,自动拦截未授权PR2026-10-16新浪网阿里 Open Code Review 登顶 GitHub Trending 周榜第一,作者李峥峰将在 QCon 上海站揭秘百万任务验证的 Agent 工程实践2026-09-28noteAIコードレビューの3つの問題、Alibabaはこう解決した——「Open Code Review」の仕組みと使い方2026-06-07MSNAIコードレビューツール「Open Code Review」、既存のAIに各種ルールを設定してレビュー能力を底上げ可能&Alibabaグループで100万件の ...2026-06-07CSDNopen-code-review:让代码评审从凭感觉走向有流程、有规则2026-11-09CSDNopen-code-review:打造开放式代码审查工作流的工程实践2026-11-09CSDNopen-code-review:用Go打造AI代码审查流水线,提交前拦截风险2026-11-08CSDNOpen-Code-Review:基于 CLI 与本地 LLM 的可审计代码审查实践2026-11-07
News & coverage (8)
Hacker NewsOpen Code Review – An AI-powered code review CLI tool▲ 284 · 73 comments · 2026-06-05TechTargetWhat repos are trending on GitHub?2026-09-21OrcaRouterAutomated Code Review: Self-Host the Harness, Pay Per Token2026-08-28OrcaRouterOpen Code Review 2026: Open-Source vs Hosted, Real Costs2026-08-18GIGAZINEOpen Code Review, an AI code review tool, allows users to enhance the review capabilities of existing AI by setting various rules, and has already detected 1 million code defects within the Alibaba Group.2026-06-07MediumHow to Connect OpenClaw to LINE: Setup Guide and Best Practices for AI-Powered Customer Service2026-03-19MediumFrom OpenClaw to DroidClaw: Your Friendly Guide to Android AI Automation | by Muhamed Fazal PS | Write A Catalyst2026-02-24Wikimedia .orgFrom Gerrit to Gitlab: join the discussion2020-09-21