Bash Code Review Tool — Ship Safer Shell Scripts
Purpose-built for reviewing pull requests that touch Bash. Paste the changed script and export the review straight into a PR comment.
Reviewer output ready to paste in a PR
### bashchecker review
- **high** line 8: `curl | bash` — unvetted remote execution
- **medium** line 14: unquoted `$path` — breaks on filenames with spaces
- **low** line 21: `[ ]` used for string compare — prefer `[[ ]]`
Reviewer-focused output
Findings are grouped, severity-graded, and formatted for pasting directly into a PR comment. No screenshots, no manual reformatting.
What it looks for in a diff
The tool reviews the whole file, not just the diff. That catches when a change on line 40 breaks an assumption from line 5 — the class of bug diff-only linters miss.
Backs your review with rule references
Every finding cites the underlying issue class (ShellCheck rule when applicable). Reviewer credibility goes up when suggestions come with a rationale.
Frequently asked questions
- Can I use this for GitHub PR reviews?
- Yes. Export as Markdown and paste into the review comment box, or copy individual findings inline.
- Does it work for merge-request bots?
- The JSON export is designed for that — pipe it into your bot to post structured findings.
- Do the suggestions replace human review?
- No. Treat it as a strong first-pass. Human context — "why this script exists, what it must not break" — still matters.