Does CodeGuru Security also provide the same reviews as CodeGuru Reviewer?

While CodeGuru Security and CodeGuru Reviewer share some similarities, they have distinct focuses and capabilities.

CodeGuru Security is primarily designed to identify potential security vulnerabilities and policy violations in your code. It performs code security analysis using Amazon CodeGuru detectors, which are informed by years of security best practices. Additionally, it scans for hardcoded secrets.

CodeGuru Reviewer, on the other hand, has a broader scope. It focuses on improving overall code quality, adherence to best practices, and identifying potential defects. It evaluates code against best practices observed in popular open source repositories and Amazon's own codebase, which goes beyond just security concerns.

For GitHub pull requests specifically:

1. CodeGuru Reviewer automatically creates incremental code reviews for every pull request in associated repositories. It provides recommendations on code quality, best practices, and potential defects, which can be viewed in the pull request comments.

2. CodeGuru Security can be configured to scan pull requests, but its focus is primarily on security vulnerabilities and policy violations. By default, it performs security analysis, but you can enable quality analysis as well by specifying the analysis type when creating a scan.

If your primary concern is identifying security vulnerabilities, CodeGuru Security might be more suitable. However, if you're looking for a more comprehensive code review that includes both security and general code quality improvements, CodeGuru Reviewer might be the better choice.

It's worth noting that Amazon recommends using both automated tools like CodeGuru and traditional peer review processes for the most comprehensive code review. This combination helps identify more issues before they reach production.
Sources
Types of code scans - Amazon CodeGuru Security
About full repository analysis and incremental code reviews - Amazon CodeGuru Reviewer
Step 3: Get recommendations - Amazon CodeGuru Reviewer