How to set up AI code review on GitHub - Fossa

Setting up Fossa on GitHub takes a few minutes. Once connected, every pull request gets reviewed automatically.

Steps

Create an account at fossa.local or self-host Fossa
Connect GitHub — install the Fossa GitHub App when prompted during setup
Select repositories — choose which repositories Fossa should review
Open a PR — Fossa reviews it automatically and posts comments

What you get

Automated reviews on every PR (or on-demand with @fossy start-review)
Comments posted directly in the PR with code suggestions
Customizable rules, severity filters, and suggestion limits
Business logic validation against linked tasks

Custom configuration

Drop a fossa-config.yml in your repo root to customize behavior per repository. The file overrides web settings automatically.

Using a Personal Access Token

For private repositories or organizations with stricter permissions, you may need to configure a GitHub Personal Access Token (PAT). For the full setup guide, see Quickstart and GitHub App setup.