IRA — AI-Powered Code Reviews for Pull Requests

IRA reviews your pull requests using AI and posts inline comments with explanations, impact assessments, and suggested fixes.

Works with any language. Supports GitHub, GitHub Enterprise, Bitbucket Cloud, and Bitbucket Server/Data Center.

🆕 Also available as a VS Code Extension — AI reviews right inside your editor. Now with Review Current File (no PR needed) and Test Generation from JIRA acceptance criteria.

Quick Start

npx ira-review review \
  --pr 42 \
  --scm-provider github \
  --github-token 'ghp_xxxxx' \
  --github-repo owner/repo \
  --ai-api-key 'sk-xxxxx' \
  --dry-run

Drop --dry-run to post comments on the PR.

Install

npx ira-review review --help            # no install needed
npm install -g ira-review                # or install globally
npm install --save-dev ira-review        # or add to your project

Capabilities

| Feature | Description | |---|---| | AI Code Review | Inline PR comments with explanation, impact, and suggested fix | | Risk Scoring | 0–100 score with auto-labels on GitHub (ira:critical / ira:high / ira:medium / ira:low) | | JIRA AC Validation | Per-criterion pass/fail with % completion against acceptance criteria | | Test Generation | Generate tests from JIRA tickets in 8 frameworks (Jest, Vitest, Mocha, Playwright, Cypress, Gherkin, Pytest, JUnit) | | SonarQube Enrichment | AI explanations and fixes for existing Sonar issues | | Smart Notifications | Slack & Teams with risk threshold filtering (--notify-min-risk high --notify-on-ac-fail) | | Framework Detection | Tailored suggestions for React, Angular, Vue, NestJS, and more | | Multi-SCM | GitHub, GitHub Enterprise, Bitbucket Cloud, Bitbucket Server/Data Center | | Multi-AI | OpenAI, Azure OpenAI, Anthropic, Ollama (local/free) |

Quick Reference

| What you want | What to add | |---|---| | AI-only review | --pr, SCM token, --ai-api-key | | + SonarQube | --sonar-url, --sonar-token, --project-key | | + JIRA validation | --jira-url, --jira-email, --jira-token, --jira-ticket | | + Test generation | --generate-tests --test-framework vitest | | + Slack notify | --slack-webhook https://hooks.slack.com/services/xxx | | + Teams notify | --teams-webhook https://outlook.office.com/webhook/xxx | | Only high risk alerts | --notify-min-risk high | | Preview only | --dry-run | | Use Anthropic | --ai-provider anthropic --ai-api-key sk-ant-xxx | | Use Ollama (free) | --ai-provider ollama |

GitHub Actions

name: AI Code Review
on:
  pull_request:
    types: [opened, synchronize]

jobs:
  review:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/setup-node@v4
        with:
          node-version: 20
      - run: |
          npx ira-review review \
            --pr ${{ github.event.pull_request.number }} \
            --scm-provider github \
            --github-token ${{ secrets.GITHUB_TOKEN }} \
            --github-repo ${{ github.repository }} \
            --no-config-file
        env:
          IRA_AI_API_KEY: ${{ secrets.OPENAI_API_KEY }}

Config File

Create .irarc.json in your project root:

{
  "scmProvider": "github",
  "githubRepo": "owner/repo",
  "aiModel": "gpt-4o-mini",
  "minSeverity": "MAJOR"
}

CLI flags > env vars > config file. Tokens are blocked from config files for security.

Security

• Runs in your CI — tokens never leave your infrastructure
• No telemetry, analytics, or tracking
• Config files block sensitive fields automatically

Requirements

• Node.js 18+
• An AI provider API key (or Ollama running locally)

License

Proprietary. See LICENSE file for details.

📖 Full docs: github.com/patilmayur5572/ira-review
🧩 VS Code Extension: marketplace.visualstudio.com