How Reviews Work

Review pipeline

When a pull request is opened or updated, VULQN:

1. Receives a webhook event from your SCM
2. Fetches the PR diff
3. Filters files using your .vulqn.json config and the global ignore list
4. Sends the diff to the AI review engine
5. (Optional) Runs a peer review pass to adversarially validate findings
6. Posts inline comments on the PR
7. Updates the PR build status

Findings

Each finding includes a severity (critical, medium, or praise), a category, a confidence level, and a fix suggestion.

Re-reviews

VULQN automatically re-reviews a PR when new commits are pushed. The first 5 re-reviews are free — the 6th onwards consumes a credit.

Full documentation coming soon.