code-review-assistant

Code Review Assistant

MVP implementation of a static-analysis aggregation and AI-assisted code review pipeline for C/C++ projects.

Workflow documentation: docs/workflow.md

Plugin packaging is available under plugins/code-review-assistant.

Features

• Import reports from Cppcheck, Flawfinder, Splint, CppDepend, and Coverity
• Normalize findings into a unified schema
• Preprocess fixed SESIP first-review reference documents (Initial prompt.docx, False positives prompt.docx, NXP_AW692-AVA_TP_v1.1.pdf)
• Generate Codex / Claude Code prompt packs for two-step first-pass analysis, targeted source recheck, and multi-round blind review
• Merge duplicate findings and export Markdown, JSON, HTML, and PDF reports

Usage

python -m app.main all --config examples/review_config.yaml

codex / claude_code modes generate prompt packs under review-output/ai-analysis/prompts/. heuristic mode exists only as an offline demo/testing fallback.

The first-review flow expects a reference_docs.first_review section in the config that points to:

• initial_prompt_docx
• false_positive_prompt_docx
• sesip_test_plan_pdf

If installed as a package:

review all --config examples/review_config.yaml

Supported input formats

• Cppcheck: XML
• Flawfinder: plain text
• Splint: plain text
• CppDepend: XML
• Coverity: JSON

AI review modes

• codex: generate prompt/context artifacts for Codex-driven review
• claude_code: generate prompt/context artifacts for Claude Code-driven review
• heuristic: local fallback for tests and offline demos

Tests

python -m unittest discover -s tests -v