Vortex AI code review for GitHub
Free AI pull request reviewson GitHub.
Install the Vortex GitHub App and every pull request gets a repo-aware review: inline comments on the lines that matter and a check on the PR, on every push.
30 free reviews a month, no card.
const id = c.req.param("id");+ const invoice = await db.invoices.find(id);+ return c.json(invoice);Blocker
Any signed-in user can read another account’s invoice
The handler loads the invoice by id alone. Every other route in src/api/ scopes the lookup to c.get("user").accountId, so this one leaks invoices across accounts. Filter by the caller’s account and return 404 when it does not match.
// HOW IT WORKS
Install, open a PR, read the review
$ step.1
Install the GitHub App
Sign in with GitHub or Google, then install mergestorm-vortex on the repositories you choose. No card.
$ step.2
Open a pull request
Vortex reads the diff, the code around it and any issue the PR closes, on every push.
$ step.3
Vortex comments
Findings land as inline review comments on the lines they point at, with a GitHub check on the PR.
Want a pass right now? Comment @mergestorm-vortex review on any pull request.
// WHAT VORTEX DOES
Reviews that read the repo
Repo-aware, not diff-only
Vortex reads the surrounding code and the linked GitHub issue, so a finding can point at code the diff itself does not show.
Every push, or on demand
Reviews run on each push to an open PR. Comment the mention on any PR to ask for a pass by hand.
Fixes stay off until you opt in
Cyclone can commit fixes for Vortex findings, but only after you turn it on. Reviews alone change nothing in your repo.
// FROM MAINTAINERS
What maintainers say
“Mergestorm did a nice job on my latest PR, catching some errors that [CodeRabbit] did not catch. It motivated me to become a paid subscriber!”
30 free reviews every month
The free plan includes 30 credits a month and a completed review uses one. No card to start. See pricing →