Security concerns

[developer239]

Why not provide the website codebase? Amazing idea and perfect execution. But I can't imagine using this on private repositories - not to mention work related things - giving up API key also doesn't seem to be a good idea. 🤔

[domvwt]

Hi @developer239 - I agree with your concerns, this was a quick PoC and I don't recommend using it in production as is. This implementation only works on public GitHub repositories so you'd need to make a few changes to get it to check anything private.

The front and backend are handled by streamlit. If you clone the repo and install the dependencies you can launch the app locally by running streamlit run chagpt_code_review/main.py.

An API key is required because OpenAI charge on a per-token basis which can quickly get expensive on large code bases!