A multi-model council reviews every pull request — then opens a fix PR you merge with one click. No code egress. No vendor lock-in. No secrets shipped to a third-party SaaS.
Install on GitHub →Deploys on your own Kubernetes. Source code stays on your infra — only metadata talks to GitHub.
Specialist reviewers (security, correctness, performance, design) plus an arbiter. Fewer hallucinations, honest severities.
For each finding with a concrete fix, CodePom opens a separate PR with the patch. Merge it — your CI validates the result.
The security-conscious orgs that can't use CodeRabbit or Copilot — finance, health, EU/GDPR, defense-adjacent.
| CodePom | CodeRabbit | GitHub Copilot | |
|---|---|---|---|
| Self-hosted / no code egress | Yes | No | No |
| Autonomous fix PRs | Yes | Reviews only | No |
| Multi-model consensus | Yes | Single | Single |
| Bring your own models (NIM / local) | Yes | No | No |
| Open core (self-host free) | Yes | No | No |
Install the GitHub App. That's the setup.
.codepom.json (modes, severities, personas, ignore paths).codepom/fix-* PR. Merge it; your CI runs against the result — CodePom never executes your tests.Reviews are free forever (open core). Pay for autonomous fixes.