Devin Review and the pull request workflow

If you delegate implementation to an agent, review becomes your bottleneck. Devin Review is Cognition’s answer to that — a full code review platform inside the Devin web app rather than a bot that leaves comments.

What it supports

GitHub, including Enterprise Server and Cloud, and GitLab, including Self-Managed. Public pull requests can be reviewed without a Devin account; private ones require an account or the CLI.

Three ways in

1. The web app — app.devin.ai/review
2. A URL swap — replace github.com with devinreview.com in any pull request URL
3. The CLI — npx devin-review {pr-link}

The URL swap is the one worth remembering. It turns “review this PR” into a single edit in the address bar.

What it actually does

Several of these are more interesting than the usual “AI reviews your code” pitch:

• Groups changes logically rather than alphabetically by filename. On a wide refactor this is the difference between a reviewable diff and an unreviewable one.
• Detects moved or copied code and displays it cleanly instead of as a large delete plus a large add.
• Flags likely bugs with confidence levels, so you can triage rather than read every note at equal weight.
• Detects security vulnerabilities with CWE classification — a real classification, not a vague warning.
• Answers questions about the PR using context from the rest of the codebase, which is the thing a diff view fundamentally cannot do.
• Writes back to your provider. Comments, approvals, and change requests sync to GitHub. You can merge, close, convert to draft, mark ready, or toggle auto-merge.
• Applies fixes. You can ask the chat agent to make an edit, review it, and commit it.

Turning on automatic reviews

Go to Settings → Review in the web app, add repositories under Repositories, and have users self-enroll. Once enabled, Devin reviews automatically when a pull request is opened, when new commits are pushed, and when a draft is marked ready.

Where you still decide

Worth being blunt: confidence levels and CWE tags are triage aids, not verdicts. Devin Review changes how quickly you can understand a change; it does not transfer responsibility for merging it.

Architecture, whether the change should exist at all, and the security judgment behind a flagged finding all stay with you. The realistic gain is that you spend your review attention on those questions instead of on reconstructing what the diff did.

References

1. Devin Review — docs.devin.ai
2. Introducing Devin Review — cognition.com
3. Devin Review autofix — docs.devin.ai

From Devin Central — subscribe for Devin news, features & tutorials. Devin is a trademark of Cognition.