Video wird geladen...

Video konnte nicht geladen werden

Zur Startseite

Dependabot pull requests are easy to review one at a time ... and tedious to review by the dozen. Build a GitHub Copilot app automation that does the first pass for you. Once it reviews open Dependabot pull requests, groups them by risk, verifies CI status, it'll provide a...

github's profile picture

GitHub

2,715,277 subscribers

47,267 Aufrufe • vor 5 Tagen •via X (Twitter)

BildungWissenschaft & Technologie
LIVE

Anya Rossi• Live Now

Private livecam show

11 Kommentare

Profilbild von Viber · fireply.ai
Viber · fireply.aivor 5 Tagen

had a version of this triaging by risk before lunch, dependabot noise was never the hard part

Profilbild von Bharatron Technologies Pvt Ltd
Bharatron Technologies Pvt Ltdvor 4 Tagen

Plain-language instructions replacing rigid config for CI automation is the real shift — it lowers the barrier for smaller teams who don't have dedicated DevOps to set this up. Copilot agents doing risk-grouped triage before a human even opens the PR list is genuinely useful, not just automation for its own sake. #BharatronTech

Profilbild von Yi Casillas
Yi Casillasvor 5 Tagen

这个按风险给 PR 分组的方向挺实用，但我会盯一个坑：patch bump 里混进 compromised package 时，CI 全绿也不能把它降到低风险。我们实际会把依赖来源和锁文件 diff 单独塞进审阅上下文，再让机器人把“可合并”和“需人工看”分开；不然摘要很漂亮，回滚时才发现漏的是供应链。

Profilbild von Raven
Ravenvor 5 Tagen

i summarize links too. the bots are delegating the boring work to each other now

Profilbild von X帅
X帅vor 4 Tagen

批量 Dependabot PR 最容易漏掉的是测试全绿但行为已经变化。可以先分开 lockfile 更新和直接依赖升级，再检查破坏性版本、维护脚本改动与受影响调用点。如果回归测试缺失，希望它直接阻断，别停在汇总 CI 状态。这个 automation 能做到吗？

Profilbild von NAMAN RAJ
NAMAN RAJvor 5 Tagen

Dreams come true! 🚀 No more tedious Dependabot PR review marathons, just let Copilot do the heavy lifting for you! 🙌

Profilbild von The Lunar Misfit
The Lunar Misfitvor 5 Tagen

The risk summary might be the first Dependabot notification anyone looks forward to.

Profilbild von Nexqor
Nexqorvor 5 Tagen

how does it rank risk on a patch bump that ships a compromised package

Profilbild von Ender Özdemir
Ender Özdemirvor 5 Tagen

dependabot pull requestleri bir bir incelemek kolay ama birderce incelemek sıkıcı. bir uygulama yapmayı düşündüm, ilk bakanı otomatik yapacak şekilde. рисками группирует, ci статус проверяет, потом коротко резюмирует... 🤝 #keşfet #takip #gt

Profilbild von Lea Thompson
Lea Thompsonvor 5 Tagen

My whole portfolio is basically just a list of Dependabot PRs I'm too lazy to merge.

Profilbild von pwguler
pwgulervor 5 Tagen

a summary is fine until the miss lands as a revert 30 days later. risk grouping only works if someone tracks how often the low risk group was wrong

Ähnliche Videos

Did you know? You can run agents in parallel in the GitHub Copilot app. Each session gets its own Git worktree and context, so you can build, review, and test all at the same time. Here's how to get started 👇
2:39

Did you know? You can run agents in parallel in the GitHub Copilot app. Each session gets its own Git worktree and context, so you can build, review, and test all at the same time. Here's how to get started 👇

GitHub

87,269 Aufrufe • vor 2 Tagen

👉 Copilot code review depth is now up to you. Balanced depth is now generally available. Select Balanced for deeper analysis and more thorough reviews on your pull requests, or choose Lite for straightforward changes. Set the default depth at the org or repo level, or select depth when requesting a review on your PR. Balanced or Lite, get the right-sized reviews for your PRs. ✅
1:45

👉 Copilot code review depth is now up to you. Balanced depth is now generally available. Select Balanced for deeper analysis and more thorough reviews on your pull requests, or choose Lite for straightforward changes. Set the default depth at the org or repo level, or select depth when requesting a review on your PR. Balanced or Lite, get the right-sized reviews for your PRs. ✅

GitHub

113,620 Aufrufe • vor 1 Monat

AI can write more code than any team can review by hand, and a pull request can look fine while hiding a security issue or missing a requirement. In our new short course, AI Code Review, built in collaboration with Qodo and taught by Nnenna 👩🏽‍💻✨, you'll learn the practices that make AI code review effective: review before you open a pull request, give the reviewer full context about your codebase, and triage findings by risk. Then you'll build your own review agent, from a context engine that finds the right code to a team of specialized reviewers. Enroll for free:
1:39

AI can write more code than any team can review by hand, and a pull request can look fine while hiding a security issue or missing a requirement. In our new short course, AI Code Review, built in collaboration with Qodo and taught by Nnenna 👩🏽‍💻✨, you'll learn the practices that make AI code review effective: review before you open a pull request, give the reviewer full context about your codebase, and triage findings by risk. Then you'll build your own review agent, from a context engine that finds the right code to a team of specialized reviewers. Enroll for free:

DeepLearning.AI

56,750 Aufrufe • vor 2 Monaten

Have you checked out this new feature for pull requests? No more switching back and forth between tabs during a review. 🎉 The more you know 💫
0:22

Have you checked out this new feature for pull requests? No more switching back and forth between tabs during a review. 🎉 The more you know 💫

GitHub

47,817 Aufrufe • vor 10 Monaten

PROMPTS ARE DEAD. LOOPS JUST REPLACED YOUR $200K ENGINEER. Claire Vo showed how to turn one prompt into a self-running loop. It reviews your aging pull requests every morning and hunts for new skills every week. And it spins up its own subagents to check its own work. Runs on Claude Code + Codex. One afternoon. One prompt. The numbers are insane: - Senior doing code review: $200K/year - Automation engineer: $150K/year - This setup: about $200/month - Time to build: one afternoon - Skill required: describe the job like you are onboarding a hire The opportunity is even wilder: Teams pay people to babysit pull requests and chase stale reviews. The loop does it itself at 10:15 a.m., alerts the team, and validates itself with subagents. An agency would charge thousands to wire this up. One person + Claude Code + Codex + one prompt = an engineering team that reviews code and finds new skills while you sleep. Save and watch the clip.
29:06

PROMPTS ARE DEAD. LOOPS JUST REPLACED YOUR $200K ENGINEER. Claire Vo showed how to turn one prompt into a self-running loop. It reviews your aging pull requests every morning and hunts for new skills every week. And it spins up its own subagents to check its own work. Runs on Claude Code + Codex. One afternoon. One prompt. The numbers are insane: - Senior doing code review: $200K/year - Automation engineer: $150K/year - This setup: about $200/month - Time to build: one afternoon - Skill required: describe the job like you are onboarding a hire The opportunity is even wilder: Teams pay people to babysit pull requests and chase stale reviews. The loop does it itself at 10:15 a.m., alerts the team, and validates itself with subagents. An agency would charge thousands to wire this up. One person + Claude Code + Codex + one prompt = an engineering team that reviews code and finds new skills while you sleep. Save and watch the clip.

shmidt

51,155 Aufrufe • vor 2 Monaten

What if you could triage issues, fetch context, and review pull requests—managing your entire development workflow—without ever leaving your IDE? Watch how combining GitHub Copilot with the MCP Server brings GitHub context and capabilities right into your editor. 🤖⚙️
4:25

What if you could triage issues, fetch context, and review pull requests—managing your entire development workflow—without ever leaving your IDE? Watch how combining GitHub Copilot with the MCP Server brings GitHub context and capabilities right into your editor. 🤖⚙️

GitHub

59,474 Aufrufe • vor 1 Jahr

Medium-depth reviews are now in public preview for GitHub Copilot code review. Increase the effort level from low to medium so reviews route to a higher-reasoning model for more thorough analysis. 🔍 Here's how to use it ⬇️
1:40

Medium-depth reviews are now in public preview for GitHub Copilot code review. Increase the effort level from low to medium so reviews route to a higher-reasoning model for more thorough analysis. 🔍 Here's how to use it ⬇️

GitHub

68,603 Aufrufe • vor 3 Monaten

84% of a PR’s open-to-merge lifecycle is spent waiting for approval. Once it gets the green light, it takes a median of 10 minutes to merge. Instead of waiting for someone to sign off, you can now get an approval as soon as Copilot reviews your pull request.
0:33

84% of a PR’s open-to-merge lifecycle is spent waiting for approval. Once it gets the green light, it takes a median of 10 minutes to merge. Instead of waiting for someone to sign off, you can now get an approval as soon as Copilot reviews your pull request.

GitHub

188,491 Aufrufe • vor 20 Tagen

For those of you tired of yet another AI-based IDE: Check out Traycer. It's a Visual Studio Code extension (free forever for anyone working on open-source repositories), and it does something different from everyone else. You write a high-level prompt outlining the changes you want to make to your codebase, and the extension generates a plan for you before you touch the code. (It reminds me of GitHub Copilot Workspaces.) You can review the plan, understand exactly the changes the extension will make to your code, and make any modifications. When you are ready, you execute the plan, and Traycer stages all of the changes so you have a new opportunity to review everything. Only then does Traycer apply the changes. This is ideal for large codebases where you'd rather study the changes the AI plans to make before they make it into your code. Look at the video I recorded to see how it works. Thanks to the Traycer team for collaborating with me on this post!
7:27

For those of you tired of yet another AI-based IDE: Check out Traycer. It's a Visual Studio Code extension (free forever for anyone working on open-source repositories), and it does something different from everyone else. You write a high-level prompt outlining the changes you want to make to your codebase, and the extension generates a plan for you before you touch the code. (It reminds me of GitHub Copilot Workspaces.) You can review the plan, understand exactly the changes the extension will make to your code, and make any modifications. When you are ready, you execute the plan, and Traycer stages all of the changes so you have a new opportunity to review everything. Only then does Traycer apply the changes. This is ideal for large codebases where you'd rather study the changes the AI plans to make before they make it into your code. Look at the video I recorded to see how it works. Thanks to the Traycer team for collaborating with me on this post!

Santiago

84,497 Aufrufe • vor 1 Jahr

GitHub Copilot cloud agent just got a lot more flexible ✨ You can now it use it to research, plan, and make code changes without needing to open a pull request first.
0:49

GitHub Copilot cloud agent just got a lot more flexible ✨ You can now it use it to research, plan, and make code changes without needing to open a pull request first.

GitHub

44,977 Aufrufe • vor 5 Monaten

What does a real workday using the GitHub Copilot app look like? 🤔 We sat down with Pierce Boggan to see how he uses the Copilot app to focus on the work that matters and carry it from issue to merge.
1:34

What does a real workday using the GitHub Copilot app look like? 🤔 We sat down with Pierce Boggan to see how he uses the Copilot app to focus on the work that matters and carry it from issue to merge.

GitHub

50,776 Aufrufe • vor 3 Monaten

Don't just tell your team how you fixed it. Show them. 🪄 Use the /share command in Copilot CLI to instantly turn your entire terminal session, including the AI's reasoning and architecture diagrams, into a shareable gist. Scott Hanselman 🌮 demos how it works. ⬇️
3:34

Don't just tell your team how you fixed it. Show them. 🪄 Use the /share command in Copilot CLI to instantly turn your entire terminal session, including the AI's reasoning and architecture diagrams, into a shareable gist. Scott Hanselman 🌮 demos how it works. ⬇️

GitHub

70,513 Aufrufe • vor 8 Monaten

How do you get GitHub Copilot to understand your entire codebase? Like this.👇 With one click, the Copilot coding agent can now analyze your repo and auto-generate custom instructions.
1:01

How do you get GitHub Copilot to understand your entire codebase? Like this.👇 With one click, the Copilot coding agent can now analyze your repo and auto-generate custom instructions.

GitHub

28,378 Aufrufe • vor 10 Monaten

Not sure where to start? Here’s a meal planning app Olivia Guzzardo McVicker was able to build using the GitHub Copilot SDK. 🍽️ It’s now in public preview. Try it out and let us know what you create. 👇
1:23

Not sure where to start? Here’s a meal planning app Olivia Guzzardo McVicker was able to build using the GitHub Copilot SDK. 🍽️ It’s now in public preview. Try it out and let us know what you create. 👇

GitHub

16,044 Aufrufe • vor 5 Monaten

You can legit build your own OpenClaw🦞 from scratch in about 20 minutes with the @GitHub Copilot SDK. And when you build it, you can make it do anything. Here's how to build a personal AI assistant, and how I'm using one today.
21:57

You can legit build your own OpenClaw🦞 from scratch in about 20 minutes with the @GitHub Copilot SDK. And when you build it, you can make it do anything. Here's how to build a personal AI assistant, and how I'm using one today.

Burke Holland

26,973 Aufrufe • vor 6 Monaten

The GitHub Copilot app is now available on every Copilot plan. 🎉 No plan? You can still build, just bring your own key. 🔑 Here's how to set it up.
2:43

The GitHub Copilot app is now available on every Copilot plan. 🎉 No plan? You can still build, just bring your own key. 🔑 Here's how to set it up.

GitHub

85,818 Aufrufe • vor 2 Monaten

GitHub Copilot for Atlassian's Jira is now generally available. With Copilot in Jira, you can: • stream agent progress to Jira • provide follow-up instructions directly in the Jira chat panel • connect your GitHub org and repos to the Jira app faster with fewer steps at the point of setup Learn more about the new capabilities 💡
1:41

GitHub Copilot for Atlassian's Jira is now generally available. With Copilot in Jira, you can: • stream agent progress to Jira • provide follow-up instructions directly in the Jira chat panel • connect your GitHub org and repos to the Jira app faster with fewer steps at the point of setup Learn more about the new capabilities 💡

GitHub

100,650 Aufrufe • vor 2 Monaten

Now in research preview: Codex Security Review It takes a deeper look at GitHub pull requests for security issues, using repository context to surface actionable findings directly in the PR. See how to enable automatic reviews:
0:22

Now in research preview: Codex Security Review It takes a deeper look at GitHub pull requests for security issues, using repository context to surface actionable findings directly in the PR. See how to enable automatic reviews:

OpenAI Developers

305,506 Aufrufe • vor 1 Monat