code-review-agent

Expert review guidance for Dockerfile changes (Dockerfile, Dockerfile.*, *.Dockerfile). Flags container security holes, build correctness bugs, cache/size regressions, and unidiomatic instructions in a diff. Use when reviewing modified or added Dockerfiles.

Expert review guidance for GitHub Actions workflow changes (.github/workflows/*.yml|*.yaml). Flags CI/CD security holes (script injection, pwn-request, unpinned actions, over-broad token permissions), workflow correctness bugs, and unidiomatic patterns in a diff. Use when reviewing modified or added GitHub Actions workflows.

Expert review guidance for GitLab CI changes (.gitlab-ci.yml). Flags pipeline security holes (untrusted-input injection, privileged runners, leaked protected variables, unpinned images), job/DAG correctness bugs, and unidiomatic patterns in a diff. Use when reviewing modified or added GitLab CI configuration.

Expert code-review guidance for Java (.java) changes. Flags correctness bugs, concurrency hazards, security vulnerabilities, performance problems, and unidiomatic code in a diff. Use when reviewing modified or added Java source.

Expert code-review guidance for JavaScript and TypeScript (.js/.jsx/.ts/.tsx) changes. Flags correctness bugs, security vulnerabilities, performance problems, and unidiomatic patterns in a diff. Use when reviewing modified or added JS/TS source, including React/Node.

Expert review guidance for Jenkins pipeline changes (Jenkinsfile, declarative or scripted Groovy). Flags pipeline security holes (Groovy/shell injection from build params, credential leakage, unverified remote scripts), pipeline correctness bugs, and unidiomatic patterns in a diff. Use when reviewing modified or added Jenkinsfiles.

Expert code-review guidance for Python (.py/.pyw) changes. Flags correctness bugs, security vulnerabilities, performance problems, and unidiomatic code in a diff. Use when reviewing modified or added Python source.