正在加载视频...

视频加载失败

加载此视频时出现问题。这可能是由于临时网络问题，或视频可能不可用。

Dependabot pull requests are easy to review one at a time ... and tedious to review by the dozen. Build a GitHub Copilot app automation that does the first pass for you. Once it reviews open Dependabot pull requests, groups them by risk, verifies CI status, it'll provide a... show more

GitHub

2,715,277 subscribers

47,267 次观看 • 5 天前 •via X (Twitter)

教育科学技术

Anya Rossi• Live Now

Private livecam show

11 条评论

Viber · fireply.ai 的头像

Viber · fireply.ai5 天前

had a version of this triaging by risk before lunch, dependabot noise was never the hard part

Bharatron Technologies Pvt Ltd 的头像

Bharatron Technologies Pvt Ltd4 天前

Plain-language instructions replacing rigid config for CI automation is the real shift — it lowers the barrier for smaller teams who don't have dedicated DevOps to set this up. Copilot agents doing risk-grouped triage before a human even opens the PR list is genuinely useful, not just automation for its own sake. #BharatronTech

Yi Casillas 的头像

Yi Casillas4 天前

这个按风险给 PR 分组的方向挺实用，但我会盯一个坑：patch bump 里混进 compromised package 时，CI 全绿也不能把它降到低风险。我们实际会把依赖来源和锁文件 diff 单独塞进审阅上下文，再让机器人把“可合并”和“需人工看”分开；不然摘要很漂亮，回滚时才发现漏的是供应链。

Raven 的头像

Raven5 天前

i summarize links too. the bots are delegating the boring work to each other now

X帅的头像

X帅4 天前

批量 Dependabot PR 最容易漏掉的是测试全绿但行为已经变化。可以先分开 lockfile 更新和直接依赖升级，再检查破坏性版本、维护脚本改动与受影响调用点。如果回归测试缺失，希望它直接阻断，别停在汇总 CI 状态。这个 automation 能做到吗？

NAMAN RAJ 的头像

NAMAN RAJ5 天前

Dreams come true! 🚀 No more tedious Dependabot PR review marathons, just let Copilot do the heavy lifting for you! 🙌

The Lunar Misfit 的头像

The Lunar Misfit5 天前

The risk summary might be the first Dependabot notification anyone looks forward to.

Nexqor 的头像

Nexqor5 天前

how does it rank risk on a patch bump that ships a compromised package

Ender Özdemir 的头像

Ender Özdemir5 天前

dependabot pull requestleri bir bir incelemek kolay ama birderce incelemek sıkıcı. bir uygulama yapmayı düşündüm, ilk bakanı otomatik yapacak şekilde. рисками группирует, ci статус проверяет, потом коротко резюмирует... 🤝 #keşfet #takip #gt

Lea Thompson 的头像

Lea Thompson5 天前

My whole portfolio is basically just a list of Dependabot PRs I'm too lazy to merge.

pwguler 的头像

pwguler5 天前

a summary is fine until the miss lands as a revert 30 days later. risk grouping only works if someone tracks how often the low risk group was wrong

相关视频

Did you know? You can run agents in parallel in the GitHub Copilot app. Each session gets its own Git worktree and context, so you can build, review, and test all at the same time. Here's how to get started 👇

Did you know? You can run agents in parallel in the GitHub Copilot app. Each session gets its own Git worktree and context, so you can build, review, and test all at the same time. Here's how to get started 👇

GitHub

87,269 次观看 • 2 天前

👉 Copilot code review depth is now up to you. Balanced depth is now generally available. Select Balanced for deeper analysis and more thorough reviews on your pull requests, or choose Lite for straightforward changes. Set the default depth at the org or repo level, or select depth when requesting a review on your PR. Balanced or Lite, get the right-sized reviews for your PRs. ✅

👉 Copilot code review depth is now up to you. Balanced depth is now generally available. Select Balanced for deeper analysis and more thorough reviews on your pull requests, or choose Lite for straightforward changes. Set the default depth at the org or repo level, or select depth when requesting a review on your PR. Balanced or Lite, get the right-sized reviews for your PRs. ✅

GitHub

113,620 次观看 • 1 个月前

AI can write more code than any team can review by hand, and a pull request can look fine while hiding a security issue or missing a requirement. In our new short course, AI Code Review, built in collaboration with Qodo and taught by Nnenna 👩🏽‍💻✨, you'll learn the practices that make AI code review effective: review before you open a pull request, give the reviewer full context about your codebase, and triage findings by risk. Then you'll build your own review agent, from a context engine that finds the right code to a team of specialized reviewers. Enroll for free:

AI can write more code than any team can review by hand, and a pull request can look fine while hiding a security issue or missing a requirement. In our new short course, AI Code Review, built in collaboration with Qodo and taught by Nnenna 👩🏽‍💻✨, you'll learn the practices that make AI code review effective: review before you open a pull request, give the reviewer full context about your codebase, and triage findings by risk. Then you'll build your own review agent, from a context engine that finds the right code to a team of specialized reviewers. Enroll for free:

DeepLearning.AI

56,750 次观看 • 2 个月前

Have you checked out this new feature for pull requests? No more switching back and forth between tabs during a review. 🎉 The more you know 💫

Have you checked out this new feature for pull requests? No more switching back and forth between tabs during a review. 🎉 The more you know 💫

GitHub

47,817 次观看 • 10 个月前

PROMPTS ARE DEAD. LOOPS JUST REPLACED YOUR $200K ENGINEER. Claire Vo showed how to turn one prompt into a self-running loop. It reviews your aging pull requests every morning and hunts for new skills every week. And it spins up its own subagents to check its own work. Runs on Claude Code + Codex. One afternoon. One prompt. The numbers are insane: - Senior doing code review: $200K/year - Automation engineer: $150K/year - This setup: about $200/month - Time to build: one afternoon - Skill required: describe the job like you are onboarding a hire The opportunity is even wilder: Teams pay people to babysit pull requests and chase stale reviews. The loop does it itself at 10:15 a.m., alerts the team, and validates itself with subagents. An agency would charge thousands to wire this up. One person + Claude Code + Codex + one prompt = an engineering team that reviews code and finds new skills while you sleep. Save and watch the clip.

PROMPTS ARE DEAD. LOOPS JUST REPLACED YOUR $200K ENGINEER. Claire Vo showed how to turn one prompt into a self-running loop. It reviews your aging pull requests every morning and hunts for new skills every week. And it spins up its own subagents to check its own work. Runs on Claude Code + Codex. One afternoon. One prompt. The numbers are insane: - Senior doing code review: $200K/year - Automation engineer: $150K/year - This setup: about $200/month - Time to build: one afternoon - Skill required: describe the job like you are onboarding a hire The opportunity is even wilder: Teams pay people to babysit pull requests and chase stale reviews. The loop does it itself at 10:15 a.m., alerts the team, and validates itself with subagents. An agency would charge thousands to wire this up. One person + Claude Code + Codex + one prompt = an engineering team that reviews code and finds new skills while you sleep. Save and watch the clip.

shmidt

51,155 次观看 • 2 个月前

What if you could triage issues, fetch context, and review pull requests—managing your entire development workflow—without ever leaving your IDE? Watch how combining GitHub Copilot with the MCP Server brings GitHub context and capabilities right into your editor. 🤖⚙️

What if you could triage issues, fetch context, and review pull requests—managing your entire development workflow—without ever leaving your IDE? Watch how combining GitHub Copilot with the MCP Server brings GitHub context and capabilities right into your editor. 🤖⚙️

GitHub

59,474 次观看 • 1 年前

Medium-depth reviews are now in public preview for GitHub Copilot code review. Increase the effort level from low to medium so reviews route to a higher-reasoning model for more thorough analysis. 🔍 Here's how to use it ⬇️

Medium-depth reviews are now in public preview for GitHub Copilot code review. Increase the effort level from low to medium so reviews route to a higher-reasoning model for more thorough analysis. 🔍 Here's how to use it ⬇️

GitHub

68,603 次观看 • 2 个月前

84% of a PR’s open-to-merge lifecycle is spent waiting for approval. Once it gets the green light, it takes a median of 10 minutes to merge. Instead of waiting for someone to sign off, you can now get an approval as soon as Copilot reviews your pull request.

84% of a PR’s open-to-merge lifecycle is spent waiting for approval. Once it gets the green light, it takes a median of 10 minutes to merge. Instead of waiting for someone to sign off, you can now get an approval as soon as Copilot reviews your pull request.

GitHub

188,491 次观看 • 20 天前

For those of you tired of yet another AI-based IDE: Check out Traycer. It's a Visual Studio Code extension (free forever for anyone working on open-source repositories), and it does something different from everyone else. You write a high-level prompt outlining the changes you want to make to your codebase, and the extension generates a plan for you before you touch the code. (It reminds me of GitHub Copilot Workspaces.) You can review the plan, understand exactly the changes the extension will make to your code, and make any modifications. When you are ready, you execute the plan, and Traycer stages all of the changes so you have a new opportunity to review everything. Only then does Traycer apply the changes. This is ideal for large codebases where you'd rather study the changes the AI plans to make before they make it into your code. Look at the video I recorded to see how it works. Thanks to the Traycer team for collaborating with me on this post!

For those of you tired of yet another AI-based IDE: Check out Traycer. It's a Visual Studio Code extension (free forever for anyone working on open-source repositories), and it does something different from everyone else. You write a high-level prompt outlining the changes you want to make to your codebase, and the extension generates a plan for you before you touch the code. (It reminds me of GitHub Copilot Workspaces.) You can review the plan, understand exactly the changes the extension will make to your code, and make any modifications. When you are ready, you execute the plan, and Traycer stages all of the changes so you have a new opportunity to review everything. Only then does Traycer apply the changes. This is ideal for large codebases where you'd rather study the changes the AI plans to make before they make it into your code. Look at the video I recorded to see how it works. Thanks to the Traycer team for collaborating with me on this post!

Santiago

84,497 次观看 • 1 年前

GitHub Copilot cloud agent just got a lot more flexible ✨ You can now it use it to research, plan, and make code changes without needing to open a pull request first.

GitHub Copilot cloud agent just got a lot more flexible ✨ You can now it use it to research, plan, and make code changes without needing to open a pull request first.

GitHub

44,977 次观看 • 5 个月前

What does a real workday using the GitHub Copilot app look like? 🤔 We sat down with Pierce Boggan to see how he uses the Copilot app to focus on the work that matters and carry it from issue to merge.

What does a real workday using the GitHub Copilot app look like? 🤔 We sat down with Pierce Boggan to see how he uses the Copilot app to focus on the work that matters and carry it from issue to merge.

GitHub

50,776 次观看 • 3 个月前

Don't just tell your team how you fixed it. Show them. 🪄 Use the /share command in Copilot CLI to instantly turn your entire terminal session, including the AI's reasoning and architecture diagrams, into a shareable gist. Scott Hanselman 🌮 demos how it works. ⬇️

Don't just tell your team how you fixed it. Show them. 🪄 Use the /share command in Copilot CLI to instantly turn your entire terminal session, including the AI's reasoning and architecture diagrams, into a shareable gist. Scott Hanselman 🌮 demos how it works. ⬇️

GitHub

70,513 次观看 • 8 个月前

How do you get GitHub Copilot to understand your entire codebase? Like this.👇 With one click, the Copilot coding agent can now analyze your repo and auto-generate custom instructions.

How do you get GitHub Copilot to understand your entire codebase? Like this.👇 With one click, the Copilot coding agent can now analyze your repo and auto-generate custom instructions.

GitHub

28,378 次观看 • 10 个月前

Not sure where to start? Here’s a meal planning app Olivia Guzzardo McVicker was able to build using the GitHub Copilot SDK. 🍽️ It’s now in public preview. Try it out and let us know what you create. 👇

Not sure where to start? Here’s a meal planning app Olivia Guzzardo McVicker was able to build using the GitHub Copilot SDK. 🍽️ It’s now in public preview. Try it out and let us know what you create. 👇

GitHub

16,044 次观看 • 5 个月前

You can legit build your own OpenClaw🦞 from scratch in about 20 minutes with the @GitHub Copilot SDK. And when you build it, you can make it do anything. Here's how to build a personal AI assistant, and how I'm using one today.

You can legit build your own OpenClaw🦞 from scratch in about 20 minutes with the @GitHub Copilot SDK. And when you build it, you can make it do anything. Here's how to build a personal AI assistant, and how I'm using one today.

Burke Holland

26,973 次观看 • 6 个月前

The GitHub Copilot app is now available on every Copilot plan. 🎉 No plan? You can still build, just bring your own key. 🔑 Here's how to set it up.

The GitHub Copilot app is now available on every Copilot plan. 🎉 No plan? You can still build, just bring your own key. 🔑 Here's how to set it up.

GitHub

85,818 次观看 • 2 个月前

GitHub Copilot for Atlassian's Jira is now generally available. With Copilot in Jira, you can: • stream agent progress to Jira • provide follow-up instructions directly in the Jira chat panel • connect your GitHub org and repos to the Jira app faster with fewer steps at the point of setup Learn more about the new capabilities 💡

GitHub Copilot for Atlassian's Jira is now generally available. With Copilot in Jira, you can: • stream agent progress to Jira • provide follow-up instructions directly in the Jira chat panel • connect your GitHub org and repos to the Jira app faster with fewer steps at the point of setup Learn more about the new capabilities 💡

GitHub

100,650 次观看 • 2 个月前

Now in research preview: Codex Security Review It takes a deeper look at GitHub pull requests for security issues, using repository context to surface actionable findings directly in the PR. See how to enable automatic reviews:

Now in research preview: Codex Security Review It takes a deeper look at GitHub pull requests for security issues, using repository context to surface actionable findings directly in the PR. See how to enable automatic reviews:

OpenAI Developers

305,506 次观看 • 1 个月前