AWS codecommit documentation change
Summary
Updated documentation to announce that Amazon CodeGuru Reviewer is entering maintenance mode as of November 7, 2025, preventing new repository associations and recommending alternative services (Amazon Q Developer and Amazon Inspector) for code review and security scanning.
Security assessment
The change does not address a specific security vulnerability or incident; it announces a service lifecycle change (maintenance mode). However, it adds security documentation by explicitly recommending Amazon Q Developer for 'secrets detection' and Amazon Inspector for 'software vulnerabilities' as alternatives, thereby promoting security scanning capabilities.
Diff
diff --git a/codecommit/latest/userguide/how-to-amazon-codeguru-reviewer.md b/codecommit/latest/userguide/how-to-amazon-codeguru-reviewer.md index 08535c395..3411d050f 100644 --- a//codecommit/latest/userguide/how-to-amazon-codeguru-reviewer.md +++ b//codecommit/latest/userguide/how-to-amazon-codeguru-reviewer.md @@ -5 +5 @@ -Associate a repository with CodeGuru ReviewerDisassociate a repository from CodeGuru Reviewer +# Amazon CodeGuru Reviewer and AWS CodeCommit @@ -7 +7 @@ Associate a repository with CodeGuru ReviewerDisassociate a repository from Code -# Associate or disassociate an AWS CodeCommit repository with Amazon CodeGuru Reviewer +###### Important @@ -9 +9 @@ Associate a repository with CodeGuru ReviewerDisassociate a repository from Code -Amazon CodeGuru Reviewer is an automated code review service that uses program analysis and machine learning to detect common issues and recommend fixes in your Java or Python code. You can associate repositories in your Amazon Web Services account with CodeGuru Reviewer. When you do, CodeGuru Reviewer creates a service-linked role that allows CodeGuru Reviewer to analyze code in all pull requests created after the association is made. +As of November 7, 2025, Amazon CodeGuru Reviewer is in maintenance mode. You cannot create new repository associations with CodeGuru Reviewer. Existing associations continue to function, but AWS will not enhance or add functionality to the service. @@ -11 +11 @@ Amazon CodeGuru Reviewer is an automated code review service that uses program a -After you associate a repository, CodeGuru Reviewer analyzes and comments on any issues it finds when you create pull requests. Each comment is clearly marked as having come from CodeGuru Reviewer with the designation **Amazon CodeGuru Reviewer**. You can reply to these comments just as you would to any other comment in a pull request, and you can also provide feedback on the quality of the suggestion. This feedback is shared with CodeGuru Reviewer and can help improve the service and its suggestions. +If you have an existing CodeGuru Reviewer association with a CodeCommit repository, it will continue to analyze pull requests as before. To disassociate a repository from CodeGuru Reviewer, choose **Settings** , choose **Amazon CodeGuru Reviewer** , and then choose **Disassociate repository**. @@ -13 +13 @@ After you associate a repository, CodeGuru Reviewer analyzes and comments on any -###### Note +For code review and security scanning capabilities, consider the following alternatives: @@ -15 +15 @@ After you associate a repository, CodeGuru Reviewer analyzes and comments on any -You will not see comments from CodeGuru Reviewer in pull requests that were created before the repository was associated with it. You might not see comments in pull requests created after the association for the following reasons: + * **Amazon Q Developer** — Provides code review including static analysis, secrets detection, and dependency scanning. Works in your IDE and with GitHub and GitLab repositories. For more information, see [Reviewing code with Amazon Q Developer](https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/code-reviews.html). @@ -17 +17 @@ You will not see comments from CodeGuru Reviewer in pull requests that were crea - * The pull request does not contain Java or Python code. + * **Amazon Inspector** — Automatically discovers and scans code repositories for software vulnerabilities. For more information, see [Amazon Inspector Code Security](https://docs.aws.amazon.com/inspector/latest/user/scanning-code.html). @@ -19,60 +18,0 @@ You will not see comments from CodeGuru Reviewer in pull requests that were crea - * CodeGuru Reviewer has not had enough time to run and review the code in the pull request. This process can take up to 30 minutes. Comments can appear as the review progresses, but commenting is not complete until the job status shows as **Completed**. - - * CodeGuru Reviewer did not find any issues in the Java or Python code in the pull request. - - * The code review job failed to run. To review the status of a review for a pull request, see the **Activity** tab of the pull request. - - * You are viewing changes to the pull request in the **Changes** tab, the pull request has been updated, and Amazon CodeGuru Reviewer did not find any issues in the changes. Amazon CodeGuru Reviewer comments only appear in the **Changes** tab if the comments were made on the most recent revision of the pull request. They always appear in the **Activity** tab. - - - - - - -For more information, see [Working with pull requests in AWS CodeCommit repositories](./pull-requests.html), [Review a pull request](./how-to-review-pull-request.html), and the [_Amazon CodeGuru Reviewer User Guide_](https://docs.aws.amazon.com/codeguru/latest/reviewer-ug/welcome.html). - -###### Note - -You must be signed in with an IAM user or role that has sufficient permissions to associate or disassociate a repository with CodeGuru Reviewer. For information about the managed policies for CodeCommit that include these permissions, see [AWS managed policies for CodeCommit](./security-iam-awsmanpol.html) and [AWS CodeCommit managed policies and Amazon CodeGuru Reviewer](./security-iam-awsmanpol.html#codeguru-permissions). For information about CodeGuru Reviewer permissions and security, see the _Amazon CodeGuru Reviewer User Guide_. - -###### Topics - - * Associate a repository with CodeGuru Reviewer - - * Disassociate a repository from CodeGuru Reviewer - - - - -## Associate a repository with CodeGuru Reviewer - -Use the AWS CodeCommit console to quickly associate a repository with CodeGuru Reviewer. For other methods, see the _Amazon CodeGuru Reviewer User Guide_. - - 1. Open the CodeCommit console at [https://console.aws.amazon.com/codesuite/codecommit/home](https://console.aws.amazon.com/codesuite/codecommit/home). - - 2. In **Repositories** , choose the name of the repository to associate with CodeGuru Reviewer. - - 3. Choose **Settings** , and then choose **Amazon CodeGuru Reviewer**. - - 4. Choose **Associate repository**. - -###### Note - -It can take up to 10 minutes to fully associate a repository with CodeGuru Reviewer. The status will not update automatically. To view the current status, choose the refresh button. - - - - - - -## Disassociate a repository from CodeGuru Reviewer - -Use the AWS CodeCommit console to quickly disassociate a repository from CodeGuru Reviewer. For other methods, see the _Amazon CodeGuru Reviewer User Guide_. - - 1. Open the CodeCommit console at [https://console.aws.amazon.com/codesuite/codecommit/home](https://console.aws.amazon.com/codesuite/codecommit/home). - - 2. In **Repositories** , choose the name of the repository you want to disassociate from CodeGuru Reviewer. - - 3. Choose **Settings** , and then choose **Amazon CodeGuru Reviewer**. - - 4. Choose **Disassociate repository**. @@ -81,0 +22 @@ Use the AWS CodeCommit console to quickly disassociate a repository from CodeGur +For more information about the CodeGuru Reviewer availability change, see [Amazon CodeGuru Reviewer availability change](https://docs.aws.amazon.com/codeguru/latest/reviewer-ug/codeguru-reviewer-availability-change.html).