Last Verified: May 2026
Results, commands, plan requirements, and entitlements may differ by release, project, organization, and configuration. Check the linked current product documentation before applying these instructions to a live environment.
- Gitar is an AI code review platform that reviews pull requests, suggests fixes, and commits them back to the branch when asked.
- Use Gitar when you want automated AI review and fix-on-request behavior for every GitHub pull request in your project.
- Installation takes under five minutes, and a real PR comment from
gitar-botconfirms the connection is live. - Setup involves a GitHub App installation and repository selection; Gitar handles the initial scan and PR triggers automatically.
Gitar joined Sonar in May 2026 as a verification layer of the Agent Centric Development Cycle (ACDC), providing an LLM-based approach to code review and remediation. This guide gets you up and running with Gitar in minutes: from a fresh account, to your first PR review on a connected repository.
- You want AI review and optional auto-fix behavior on PRs without writing custom integration code.
- You manage one or more GitHub repositories and have permission to install GitHub Apps on them.
- Gitar installed on your chosen GitHub account or organization with access to at least one repository.
- An initial scan completed and a PR-level review comment posted by
gitar-bot. - A working PR conversation loop, including the option to request a fix via reply.
- A GitHub account with admin rights to at least one organization.
- An open PR (or a repo wherein you can create one).
Visit app.gitar.ai and sign in with your GitHub account. Gitar's OAuth flow requests your basic identity and the organization(s) you belong to, then prompts you to Connect your repositories to proceed.
Click Connect GitHub and grant access to either select repos or all repos. Pick the repo you want to test against and (optionally) click Enable automatic PR summary enhancement for practical technical summaries in your PR descriptions.
Note: organization installs may require an org owner's approval if your org restricts third-party Apps or enforces SAML SSO. Under Installed GitHub Apps in your GitHub Settings, you can adjust repo access at any time.
Link an issue tracker or notification tool (Jira, Linear, Slack) so Gitar can pull ticket context and post status updates alongside its reviews. You can skip this and add integrations later from Settings → Integrations.
Gitar runs an initial scan as soon as the repository is connected. From there, trigger a review in one of two ways:
- Open a new pull request in the connected repository. Gitar reacts to PR activity automatically.
- Click "Try Gitar on Your Open PRs" in the dashboard to run analysis against a PR that’s already open.
After a couple minutes, gitar-bot posts a comment on the PR with a summary, plus inline comments on specific lines. If CI is failing, Gitar adds a root-cause analysis. Reply to any of gitar-bot's comments in plain language ("please fix this", "rewrite this function") and Gitar generates the change and pushes it as a new commit.
Note: Gitar never performs force pushes; every fix arrives as a new commit on the PR branch, so your history is preserved.
You should now see:
- The Gitar GitHub App listed under GitHub Settings → GitHub Apps → Installed GitHub Apps (or the org's equivalent).
- The repository enabled in your Gitar dashboard.
- A
gitar-botcomment on the PR with a summary and inline feedback. - A follow-up commit on the PR branch if you replied with a fix request.
If any of these are missing, check repository access in the App's configuration, and confirm your seat status if your workspace is on a paid plan.
- Address Gitar in PR comments with
Gitar(case-insensitive),@gitar, or@gitar-bot; that's how it knows you're talking to it. - Skip Gitar on a specific PR by adding the
gitar-skiplabel. - Apply a suggested fix by checking the box next to the suggestion on GitHub, or reacting with the checkmark emoji on GitLab.
- Gitar runs in ephemeral environments that are destroyed immediately following the completion of tasks; it does not retain your source or train models on it.
- Gitar is language-agnostic, so it works with any programming language or framework.
- Read Multilayered code verification with Gitar and SonarQube Cloud for context on how Gitar’s LLM-based review fits-in alongside SonarQube’s deterministic analysis.
- Connect the dots with Sonar's Agent Centric Development Cycle framing.
- Consult the Gitar documentation for a full reference on repository configuration, commands, dashboard features, and FAQs.