GitHub Peer Reviewer Assistant

Last updated: Jul 28, 2026

---

Steps to configure the GitHub Peer Reviewer Assistant integration

This guide outlines the steps for configuring the GitHub Peer Reviewer Assistant integration within the Fluid Attacks platform. This integration enables an automatic peer reviewer to analyze pull requests (PRs) in GitHub and add inline review comments regarding security findings.

1. Initiate the integration within the Fluid Attacks platform

1. Navigate to the Integrations section on the Fluid Attacks platform dashboard.
2. Scroll down to locate the GitHub Peer Reviewer Assistant card.
3. Click the Use integration button on the card.

2. Connect the integration to an organization group

1. A window titled "Use GitHub Peer Reviewer Assistant integration" will appear.
2. Select the specific group within your organization that contains the repositories you wish to scan.
3. Click the Connect button next to your selected group.

3. Install the Fluid Attacks GitHub App

1. You will be redirected to GitHub to install the Fluid Attacks GitHub App.
2. Choose the GitHub account or organization where you want to install the app.
3. Select whether to grant access to all repositories or only specific repositories.
4. Click Install to grant Fluid Attacks the requested permissions and complete the installation.
5. GitHub redirects you back to the Integrations page in the Fluid Attacks platform, where the group now shows as connected.

Integration management and verification

Manage the connected integration

1. Return to the GitHub Peer Reviewer Assistant card and click Edit for the connected group.
2. The "Manage GitHub Peer Reviewer Assistant integration" window will display the connected GitHub account, the connection date, and the granted permissions.
3. From this screen, you can disconnect the integration or add a new integration for other groups.
4. Click Close to exit the management window.

Verify the integration is active

1. Open or update a pull request in one of the repositories covered by the installation.
2. Confirm that the Fluid Attacks bot appears as a reviewer and that inline comments are posted on the changed lines where security vulnerabilities are detected.

How it works

Once active, the Peer Reviewer Assistant automatically analyzes each new or updated pull request in the configured repositories. When security vulnerabilities are detected, the integration posts inline review comments directly on the affected lines in the pull request diff, providing developers with immediate, actionable feedback.