Code Terrier

Code Terrier for Security-conscious teams

Built for Security-conscious teams

Security teams need to know where their code goes. Code Terrier lets you bring your own Anthropic or OpenAI-compatible key (BYOK) so reviews run on your own provider account — or use the shared pool routed through Cloudflare AI Gateway.

BYOK keys are stored AES-GCM encrypted, decrypted only for the active review, never logged, and deleted immediately on uninstall.

Install Code Terrier

What you get

  • BYOK: reviews run on your own provider account, not a shared third-party pool.
  • Keys encrypted with AES-GCM at rest, bound to your installation ID so ciphertext can't be swapped between tenants.
  • Reviews are COMMENT-only — the bot never approves, merges, pushes, or commits code.
  • Security findings are a first-class category, surfaced inline with evidence on the exact changed line.

Objections, answered

Where does my code go with BYOK?

With BYOK, reviews call the provider you configure (e.g. api.deepseek.com or api.anthropic.com) directly from your own account — not through a shared gateway. Keys are decrypted only for the active review and never logged.

Can the bot change anything in my repo?

No. Code Terrier only posts COMMENT reviews with read-only tools. It never approves, never auto-merges, and never pushes or commits code.

Start reviewing

Install Code Terrier and open a pull request. It only posts COMMENT reviews; it never approves or auto-merges.