DevGuard AI acts as an active security engineer on every pull request. It executes AST static linters, checks OSV vulnerability databases, and runs tests before rendering structured inline feedback.
The LLM orchestrator chooses tools, inspects outputs, and refines findings up to 5 iterations before producing inline PR annotations.
Wraps AST linter checks, OSV.dev vulnerability databases for package.json, and unit test suites for zero hallucinations.
Posts formatted reviews with 1-click GitHub copyable suggestions, severity tagging (Critical, Warning, Info), and file line markers.
Triggers on PR opened / synchronize, verifies HMAC-SHA256 signature.
Groq Llama 3.3 70B with Gemini 2.5 Flash fallback evaluates PR diff and chooses execution tools.
Runs AST linter, OSV vulnerability scan, and test suite runner to gather concrete evidence.
Posts structured findings with inline line comments & suggested code replacement fixes.