sturdy-dev / codereview.gpt

Reviews your Pull/Merge Requests using ChatGPT
MIT License
550 stars 68 forks source link

Using with proprietary code? #9

Closed nisanb closed 1 year ago

nisanb commented 1 year ago

Hi! I'm worried about proprietary of code.

How does it do stuff at the backend level? Does it try to git pull, and if so, how will that work for proxy-protected (or private organizations)? Does it use ChatGPT API ? If so, doesn't ChatGPT has access to the code as-well?

Cool tool though!

nisanb commented 1 year ago

Read the code a bit and answering myself:

  1. It queries Chat GPT based on your browser and then queries it as a chat.
  2. It tries to access the repository based on githubusercontent, which will only be accessible to public facing organizations.
  3. It can't access protected/private organizations, and even if it did, the data/code would be "shared" with OpenAI.

Feel free to close!