Nayjest/Gito
An AI-powered GitHub code review tool that uses LLMs to detect high-confidence, high-impact issues—such as security vulnerabilities, bugs, and maintainability concerns.
Gito – AI‑powered code reviewer
What it is – Gito is an open‑source tool that uses any LLM (OpenAI, Anthropic, Google, local models, etc.) to automatically review code changes. It can run as a CLI on a developer’s machine or be triggered from CI/CD pipelines (GitHub Actions, GitLab CI) to comment on pull‑requests.
Key capabilities
- Vendor‑agnostic LLM access – works with any provider or self‑hosted model via the
ai‑microcoreabstraction. - Fast, parallel review – sends files to the model concurrently and returns a markdown report in seconds.
- Broad language support – claims to handle “all major programming languages and frameworks”.
- Configurable – per‑machine
.gito/.envfor credentials and per‑project.gito/config.tomlfor prompts, severity levels, excluded files, etc. - Integrations – built‑in GitHub and GitLab CI workflows, Jira & Linear issue‑tracker hooks, and a placeholder for Bitbucket (planned).
- Privacy‑first – stateless client‑side tool; code is sent only to the configured LLM endpoint, never stored by Gito.
Getting started
- Install –
pip install gito.bot(or useuvx gito.botor the Windows installer). - Configure – run
gito setupto create~/.gito/.envwith your LLM API key, model name, etc. - Run locally –
gito reviewfrom the repository root to get a markdown report. - Add to CI – add the provided GitHub Actions workflow (
.github/workflows/gito-code-review.yml). The workflow installs the package, sets the LLM secrets, runsgito review, and posts the results as a PR comment.
Typical workflow
- A PR is opened → GitHub Action triggers → Gito sends the diff to the LLM → LLM returns findings (security, performance, style, etc.) → Goto posts a comment with a formatted report.
Known limitation
- Gito cannot modify workflow files from within a PR comment when using the default
GITHUB_TOKEN(GitHub blocks such changes). A personal access token withworkflowscope would work but is discouraged for security reasons.
Where to learn more
- Full command‑line reference, configuration cookbook, and platform‑specific setup guides are in the
documentation/folder of the repo.
License – MIT.
Related
- Project
- Project
- Project
- Project
- Project