Linewatch

AI code review that runs in your git hooks and puts its findings on the lines in your IDE.

Status: 0.1.0, the first release. Feedback and bug reports are welcome in the issues.

What it does

• Uses the model you already have. linewatch init finds the coding CLIs (Claude Code, Codex, Antigravity) and local models (Bionic/LM Studio) on your machine and lets you pick one. No API key needed.
• Runs in your hooks, on push, on commit or both, with native git hooks, Husky or the pre-commit framework.
• Catches secrets first with gitleaks, before anything is sent to a model.
• Reviews only the lines you changed, for security and quality, and blocks at the severity your team sets.
• Never blocks because the model is down. A timeout or a bad answer lets the commit through; gitleaks findings still count.
• Shows findings in VS Code as markers on the lines, from .linewatch/last.sarif.

Quick start

Requires Python 3.10 or later. Install gitleaks too, for secret scanning.

pipx install linewatch-cli     # or: uv tool install linewatch-cli
cd your-repo
linewatch init

JavaScript teams can also run npx linewatch init: the npm package runs the Python CLI and offers to install it. For findings on the lines, install the Linewatch extension for VS Code.

Commit the .linewatch.yaml it writes. Teammates then run linewatch init --yes.

Models

Each tested model blocked all 12 problem cases in our test suite (leaked secrets, SQL injection, command injection, path traversal, XSS, unsafe deserialization, SSRF, JWT auth bypass) on commit and on push. See Models.

Commands

Bypass a hook once with git commit --no-verify or git push --no-verify. Silence a single finding with a linewatch:ignore comment on its line.

Docs

• Getting started: install, set up a repo, what happens on a push
• Models: the models Linewatch can use and how to set each up
• Configuration: .linewatch.yaml, your user config, hooks
• VS Code extension: markers, the Problems panel, commits from the Source Control view

Repository layout

Licence

MIT