The latest articles on DEV Community by Ertan EKER (@ertan_eker_8715afd4afe9ab). https://dev.to/ertan_eker_8715afd4afe9ab https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3981194%2F60afb8bf-4183-4ced-bd33-b18b6ae1b73c.jpg https://dev.to/ertan_eker_8715afd4afe9ab en Ertan EKER Fri, 12 Jun 2026 11:50:46 +0000 https://dev.to/ertan_eker_8715afd4afe9ab/i-built-an-ai-code-reviewer-that-asks-what-breaks-in-production-35le https://dev.to/ertan_eker_8715afd4afe9ab/i-built-an-ai-code-reviewer-that-asks-what-breaks-in-production-35le <h2> The Problem </h2> <p>Code review tools are great at catching style issues. Linters catch bugs. But nobody answers the most critical question: <strong>"If I deploy this PR right now, what breaks in production?"</strong></p> <p>I've been burned by:</p> <ul> <li>A DB column added without a migration → 2 hours downtime</li> <li>An API response field renamed → frontend crashed silently</li> <li>Express v4 → v5 bump → middleware broke in production</li> </ul> <p>So I built PR Guardian.</p> <h2> What It Does </h2> <p>PR Guardian is a GitHub Action. When you open a PR, it:</p> <ol> <li>Parses the diff (language detection, file filtering)</li> <li>Analyzes it with AI (DeepSeek, specialized prompts)</li> <li>Posts findings as a PR comment with a 1-10 risk score</li> </ol> <h2> What Makes It Different </h2> <p>Every other tool checks <strong>code quality</strong>. PR Guardian checks <strong>production risk</strong>:</p> <div class="table-wrapper-paragraph"><table> <thead> <tr> <th>Tool</th> <th>Focus</th> </tr> </thead> <tbody> <tr> <td>SonarQube</td> <td>Code quality rules</td> </tr> <tr> <td>CodeRabbit</td> <td>Style + basic bugs</td> </tr> <tr> <td>Sourcery</td> <td>Python refactoring</td> </tr> <tr> <td><strong>PR Guardian</strong></td> <td><strong>Production safety</strong></td> </tr> </tbody> </table></div> <h2> Real Examples </h2> <p>Last week it caught these in a test PR:</p> <ul> <li>SQL injection via string concatenation → CRITICAL</li> <li>Session token in localStorage → CRITICAL (XSS risk)</li> <li>Express v5 major version bump → WARNING</li> </ul> <h2> Tech Stack </h2> <ul> <li>TypeScript + GitHub Actions SDK</li> <li>DeepSeek AI (10x cheaper than GPT-4/Claude)</li> <li>Compiled to single JS bundle with ncc</li> <li>25 languages, 9 with deep analysis rules</li> </ul> <h2> Try It </h2> <ol> <li>Add <code>.github/workflows/pr-guardian.yml</code> to your repo</li> <li>Set DEEPSEEK_API_KEY secret</li> <li>That's it</li> </ol> <div class="highlight js-code-highlight"> <pre class="highlight plaintext"><code> yaml - uses: ertaneker/pr-guardian@main with: github_token: ${{ secrets.GITHUB_TOKEN }} deepseek_api_key: ${{ secrets.DEEPSEEK_API_KEY }} GitHub Repo (https://github.com/ertaneker/pr-guardian) | Docs (https://github.com/ertaneker/pr-guardian/blob/main/docs/USAGE.md) MIT licensed. Free for open source. Would love your feedback! </code></pre> </div> ai automation githubactions showdev