Looking forward to the new era of security holes caused by this
sure on public free “you’re the product” sites.
Creating issues is free to a large number of people you don’t really control, whether that is the general public or some customers who have access to your issue tracker and love AI doesn’t really matter, if anything dealing with the public is easier since you can just ban members of the public who misbehave.
There was this post on Reddit listing some PRs opened by AI at .NET: https://www.reddit.com/r/ExperiencedDevs/comments/1krttqo/my_new_hobby_watching_ai_slowly_drive_microsoft/?share_id=ks1HasJ2tqDuCOW6TCYTz
It’s pretty funny and depressing at the same time…
The place I work is actively developing an internal version of this. We already have optional AI PR reviews (they neither approve nor reject, just offer an opinion). As a reviewer, AI is the same as any other. It offers an opinion and you can judge for yourself whether its points need to be addressed or not. I’ll be interested to see whether its comments affect the comments of the tech lead.
I’ve seen a preview of a system that detects problems like failing sonar analysis and it can offer a PR to fix it. I suppose for simple enough fixes like removing unused imports or unused code it might be fine. It gets static analysis and review like any other PR, so it’s not going to be merging any defects without getting past a human reviewer.
I don’t know how good any of this shit actually is. I tested the AI review once and it didn’t have a lot to say because it was a really simple PR. It’s a tool. When it does good, fine. When it doesn’t, it probably won’t take any more effort than any other bad input.
I’m sure you can always find horrific examples, but the question is how common they are and how subtle any introduced bugs are, to get past the developer and a human reviewer. Might depend more on time pressure than anything, like always.
The “AI agent” approach’s goal doesn’t include a human reviewer. As in the agent is independent, or is reviewed by other AI agents. Full automation.
They are selling those AI agents as working right now despite the obvious flaws.
This feels like an attempt to destroy open source projects. Overwhelm developers with crap PRs so they can’t fix real issues.
It won’t work long term, because I can’t imagine anyone staying on GitHub after it gets bad.
deleted by creator
Deleted