最新资讯
theverge.com OpenAI 宣布数据中心项目不再与公职人员签署保密协议 dev.to NVIDIA 发布四个开放 Cosmos 3 仿真模型 dev.to 真实 MCP 客户端击穿我们服务器的五种方式 theverge.com Airbnb 正在开发 AI 旅行 agent,计划 2027 年上半年推出 wechat 这可能是美国AI最魔幻的一天。 nytimes.com 美众议院共和党领袖要求 Nvidia 黄仁勋闭门简报 pub.towardsai.net 忘掉我:为记忆而设计的系统中的删除难题 marktechpost.com Google 发布 Gemini Omni 1.2 Flash:15 秒视频,每秒 0.07 美元 unite.ai Airbnb 计划推出覆盖规划、预订与客服的 AI 旅行 agent techcrunch.com Airbnb 称将于 2027 年上半年推出 AI 旅行代理 theverge.com Perplexity 推出面向工作的 AI 代理 Teammates unite.ai Five9 拟以约3.25亿美元收购 Level AI,扩展客服AI分销渠道
多元动态
登录 注册
行业动态 spectrum.ieee.org · @Aaron Mok

AI代码泛滥正在改变工程师的代码审查方式

原文 我的收藏

AI编码工具可快速生成大量代码,但可能隐藏错误和漏洞。公司正通过审查AI编码前的计划、使用专用AI代理捕获常规缺陷、将高风险变更送交人工审查等方式应对。Sonar对1100多名开发者的调查显示,AI生成代码激增给工程团队带来新压力。

AI推荐理由 IEEE Spectrum报道,讨论AI生成代码对代码审查的影响及应对策略,引用Sonar对1100多名开发者的调查,信息具体且来源可靠,对工程实践有参考价值。

75

正文

职业AI新闻 AI垃圾代码正在改变工程师审查代码的方式 公司重新思考初级工程师如何获得关键的编码经验 Aaron Mok 7小时前 5分钟阅读 Aaron Mok 是一名自由记者,报道AI、科技和劳动力。 David Plunkert AI编码工具现在可以在几分钟内生成数千行代码,帮助公司更快地构建功能、运行测试和修复问题。但大量AI生成的代码仍需审查。大型语言模型可以生成表面看起来整洁的代码,但隐藏着草率的错误,如有缺陷的假设、安全漏洞或仅在部署后出现的微妙错误。修复这些问题可能会抹去AI承诺的生产力提升。 公司正在通过重新思考代码审查方式来应对AI代码垃圾的冲击。新的策略正在涌现。在其他方法中,工程师在AI开始编码前仔细审查计划,部署专门的AI代理来捕获常规缺陷,将高风险更改发送给人工审查员,或要求开发人员为其代理生成的代码进行辩护。 这一转变发生在AI生成代码激增给工程团队带来新压力之际。AI代码验证初创公司Sonar对1100多名开发人员的调查显示,受访者估计AI贡献了他们添加到共享代码库中代码的42%。然而,尽管开发人员发现AI在解释和原型化代码方面有用,但96%的人并不完全信任其输出能正确工作。 投资者看到了弥合这一差距的机会。例如,8月份,AI代码审查初创公司CodeRabbit以15亿美元的估值筹集了1.43亿美元,同时声称每周为17000名客户执行超过200万次审查,包括Nvidia、Indeed和BMW Group。 代码审查的新时代将决定AI能否提供既更快又更可靠的代码。这也让一些软件工程师思考他们职业的未来:如果初级工程师自己编写代码的时间减少,他们将如何学会评判代码? AI代码审查瓶颈 AI编写的代码正在将瓶颈从生成软件转移到审查软件。根据Sonar的研究,38%的开发人员表示,审查AI生成的代码比审查同事编写的代码需要“更多努力”。其中61%的人表示,AI经常产生看起来正确但“不可靠”的代码。 对于AI视频生成平台Synthesia来说,代码审查已成为其工程工作流程中不可或缺的一部分。2025年11月,Synthesia的118名工程师全面采用Claude Code等AI编码工具。据Synthesia首席技术官Peter Hill称,结果是代码量激增。 “我不知道我们是否能达到真正信任代理生成代码的程度。” —Peter Hill,Synthesia 这些代码需要仔细检查。Hill表示,截至8月,拉取请求(即提交审查的代码库拟议更改)数量同比增长了120%。其中95%的请求包含AI生成的代码。 一个反复出现的问题是重复。Hill表示,AI工具可能无法识别某项任务的代码已经存在,并且会编写另一个版本,因为它们的上下文有限。Synthesia发现同一函数有多达10个版本,工程师需要识别并删除冗余函数。完成后,工程师重新训练AI代理,以防止再次发生。在公司规模下,Hill将让AI产生预期输出描述为“大量工作”。 代码审查工作流程中的AI代理 一些团队正试图在AI生成一行代码之前防止审查问题。 Amazon Stores的高级首席工程师McLaren Stanley表示,他正在使用AI现代化Amazon移动购物应用背后的17年代码。他的70人团队通过维护他们构建功能所需的架构骨干来支持1000多名开发人员。Stanley表示,随着AI编写代码,工程师在生成开始前花更多时间决定它应该做什么。 其中大部分工作涉及编写“规范”,即AI代理应该构建什么以及如何构建的详细计划。在生成代码前防止重复错误可以为工程师节省时间。 Stanley回忆了一次缺失指令导致代理用错误版本的Swift编程语言生成了25000行代码。切换版本产生了600个错误,无法一次性修复。Stanley丢弃了代码,更新了规范,并重新启动了代理。十五分钟后,它正确重新生成了代码。 一旦代码存在,专门的AI代理可以在人工介入前处理第一轮检查。 Amazon Web Services (AWS)的高级首席工程师David Yanacek表示,公司使用代理测试代码是否有效,对照原始计划检查代码,并在人工审查前寻找安全漏洞。 随着AI生成代码量的增加,这第一遍检查变得更加重要。在非营利软件提供商Bonterra(约有290名工程师),采用AI后三个月内,拟议更改增加了两倍,据首席技术官Tanuja Korlepra称。进入审查的代码增加了十倍,审查时间增加了两倍,使工程师检查每一行变得不切实际。 “我们拒绝让代码审查成为未经检查的模型输出的倾倒场。” —Samar Abbas,Temporal Bonterra的代理将代码与批准的设计、安全规则、编码标准和可访问性要求进行比较,然后报告其对结果的信心。低分或标记的问题会将更改发送给人工处理。涉及支付、个人数据或其他敏感系统的代码始终接受人工审查。 “代理负责阅读,人类负责判断,”Korlepra说。 Synthesia还使用AI代理来决定哪里需要人工审查 是必要的。工程师设定的标准将更多审查导向高风险更改。修改错误消息比处理客户数据或核心业务规则的代码风险更低。即便如此,只有不到5%的更改绕过人工审查。 “我不知道我们是否能达到真正信任代理生成代码的程度,”Hill说。 自动化审查不会改变对最终代码负责的人。 当机器产生的代码超过工程师能仔细阅读的数量时,人工批准可能变成“表演式批准”,软件咨询公司Making Sense的首席AI架构师JD Raimondi说。换句话说,工程师可能确认功能有效,浏览代码并批准,而完全不理解底层的选择。 开源开发者平台Temporal将责任重新放在提交代码的人身上。首席执行官Samar Abbas表示,随着AI的使用,代码量和审查时间都增加了。根据其“退回”政策,Temporal的工程师必须用自己的话解释代理的设计选择以及代码如何处理异常情况。否则,审查者将拒绝。 “我们拒绝让代码审查成为未经检查的模型输出的倾倒场,”Abbas说。 培训初级工程师使用AI 随着AI将工程工作从编写代码转向评判代码,公司正在重新考虑初级工程师如何获得经验。 Raimondi说,Making Sense的初级工程师从AI中获得了最大的生产力提升,这引发了他们对不再通过实践学到什么的担忧。该咨询公司让初级人员参与决定客户为何需要功能以及功能应如何工作,而不是将他们限制在检查AI输出上。 IBM正在使用AI让新工程师更快地承担更困难的任务。IBM自动化和AI总经理Neel Sundaresan表示,应届毕业生现在从事以前只留给高级工程师的产品功能和项目。AI帮助实现和测试代码,但如果失败,初级人员评估出错原因并修复问题,然后将工作交给高级开发人员最终批准。Sundaresan估计,AI可以帮助初级工程师完成一些以前需要高级工程师的任务的70%到80%。 Synthesia主要招聘中高级工程师。其经验较少的员工与高级同事和AI代理一起工作,负责项目部分,同时学习定义成功代码应做什么。 在Bonterra,代理现在执行许多曾经培训新工程师的明确定义的编码任务。初级人员与经验丰富的同事一起负责结果,学习指导代理、质疑其输出,并对结果负责。她说,这种方法可以帮助初级工程师建立职业发展所需的技能和知识。 “如果行业停止招聘初级人员,行业就会停止培养高级人员,”Korlepra说。 来自您网站的文章 为什么AI还没准备好成为真正的程序员› AI编码正从副驾驶转向自动驾驶› 您现在可以使用的顶级AI编码工具› 网络相关文章 AI代码审查 | CodeRabbit | 免费试用。› AI代码 - DeepAI › 编码人工智能氛围编码软件工程师 Aaron Mok Aaron Mok 是一名自由记者,报道AI、科技和劳动力。他常驻纽约市。 AI新闻生物医学 Google DeepMind绘制90亿种可能的DNA变异图谱 10小时前 3分钟阅读 机器人技术赞助文章 保护动态工业机器人电缆拖链 2026年9月3日 3分钟阅读 交通运输杂志专题 Rivian实现完全自动驾驶的赌注 11小时前 13分钟阅读 AI杂志新闻2026年7月 Claude Mythos预览需要新方法来保持代码安全 计算新闻 新工具增强视障人士的3D建模 AI新闻计算 将C代码转换为Rust以确保安全的AI工具
查看原文(中文正文为 AI 翻译)
CareersAINews AI Slop Is Changing How Engineers Review Code Companies rethink how early-career engineers can get vital coding experience Aaron Mok 7h 5 min read Aaron Mok is a freelance journalist covering AI, tech, and the workforce. David Plunkert AI coding tools can now generate thousands of lines of code in minutes, helping companies build features, run tests, and fix issues faster. But the flood of AI-generated code still has to be reviewed. Large language models can produce code that looks clean on the surface but conceals sloppy mistakes such as faulty assumptions, security vulnerabilities, or subtle errors that emerge only after deployment. Fixing those problems could erase the productivity gains AI promises. Companies are responding to the onslaught of AI code slop by rethinking how they review code. New strategies are emerging. Among other approaches, engineers are scrutinizing plans before AI begins coding, deploying specialized AI agents to catch routine flaws, sending risky changes to human reviewers, or requiring developers to defend the code their agents produce. The shift comes as the surge in AI-generated code puts new pressure on engineering teams. In a survey of more than 1,100 developers by Sonar, an AI code-verification startup, respondents estimated that AI contributed 42 percent of the code they added to shared codebases. Yet while developers found AI useful for explaining and prototyping code, 96 percent did not fully trust its output to work correctly. Investors see an opportunity in closing that gap. In August, for example, AI code-review startup CodeRabbit raised US $143 million at a $1.5 billion valuation, while claiming it performs more than 2 million reviews a week for 17,000 customers, including Nvidia, Indeed, and BMW Group. The new era of code review will determine whether AI can ever provide code that is both faster and more reliable. It also has some software engineers thinking about the future of their profession: If entry-level engineers spend less time writing code themselves, how will they learn to judge it? AI Code Review Bottlenecks AI-written code is shifting the bottleneck from generating software to reviewing it. According to the Sonar study, 38 percent of developers said “more effort” is required to review AI-generated code than code written by their colleagues. Sixty-one percent of them said AI often produced code that looked correct but was “unreliable.” For Synthesia, an AI video-generation platform, code review has become essential to its engineering workflow. In November 2025, Synthesia’s 118 engineers went all-in on AI coding tools like Claude Code. According to Peter Hill, Synthesia’s chief technology officer, the result has been a massive surge in code volume. “I don’t know if we ever get to the point where you can truly trust the agentic generation of code.” —Peter Hill, Synthesia That code demands close examination. As of August, the number of pull requests, or proposed changes to a codebase submitted for review, had risen 120 percent year over year, Hill says. Ninety-five percent of those requests contain AI-generated code. One recurring problem is duplication. Hill says AI tools may not recognize that code for a task already exists, and they’ll write another version because they have limited context. Synthesia has found as many as 10 versions of the same function, leaving engineers to identify and remove redundant functions. Once that’s done, engineers retrain the AI agent so that doesn’t happen again. At the company’s scale, Hill describes getting the AI to produce the intended output an “enormous amount of work.” AI Agents in Code Review Workflows Some teams are trying to prevent review problems before AI generates a single line of code. McLaren Stanley, a senior principal engineer at Amazon Stores, says he is using AI to modernize 17 years of code underlying Amazon’s mobile shopping app. His 70-person team supports more than 1,000 developers by maintaining the architectural backbone they need to build features. With AI writing the code, Stanley said, engineers spend more time deciding what it should do before generation begins. Much of that work involves writing a “specification,” which is a detailed plan for what the AI agent should build and how. Preventing recurring mistakes before generating code can save engineers time later. Stanley recalls how a missing instruction once caused an agent to generate 25,000 lines in the wrong version of the programming language Swift. Switching versions produced 600 errors it could not fix at once. Stanley discarded the code, updated the specification, and restarted the agent. Fifteen minutes later, it regenerated the code correctly. Once the code exists, specialized AI agents can handle the first round of checks before a person steps in. David Yanacek, a senior principal engineer at Amazon Web Services (AWS), says the company uses agents to test whether code works, check it against the original plan, and look for security flaws before a person reviews it. That first pass becomes more important as AI-generated code volume increases. At Bonterra, a nonprofit software provider with about 290 engineers, proposed changes tripled within three months of adopting AI, according to Tanuja Korlepra, the CTO. Code entering review rose tenfold and review times tripled, making it impractical for engineers to inspect every line. “We refuse to let code review become a dumping ground for unchecked model outputs.” —Samar Abbas, Temporal Bonterra’s agents compare code with the approved design, security rules, coding standards, and accessibility requirements, then report their confidence in the result. A low score or flagged problem sends the change to a person. Code involving payments, personal data, or other sensitive systems always receives human review. “Agents do the reading and humans do the judging,” Korlepra says. Synthesia also uses AI agents to decide where human review is necessary. Criteria set by engineers direct more scrutiny toward higher-risk changes. Altering an error message carries less risk than code that handles customer data or core business rules. Even so, fewer than 5 percent of changes bypass human review. “I don’t know if we ever get to the point where you can truly trust the agentic generation of code,” Hill says. Automated review does not change who is responsible for the resulting code. When machines produce more code than engineers can closely read, human approval can become “theater approval,” according to JD Raimondi, chief AI architect at the software consultancy Making Sense. In other words, an engineer might confirm that the feature works, skim the code, and approve it, all without understanding the choices underneath. Temporal, an open-sourced developer platform, puts the burden back on the person submitting the code. CEO Samar Abbas says code volume and review time have increased with AI. Under its “Send Back” policy, Temporal’s engineers must explain in their own words the agent’s design choices and how the code handles unusual conditions. Otherwise, the reviewer rejects it. “We refuse to let code review become a dumping ground for unchecked model outputs,” Abbas said. Training Junior Engineers on AI As AI shifts engineering work from writing code toward judging it, companies are reconsidering how entry-level engineers gain experience. Junior engineers at Making Sense have seen some of the largest productivity gains from AI, Raimondi says, raising concerns about what they no longer learn by doing. The consultancy keeps juniors involved in deciding why a customer needs a feature and how it should work, rather than limiting them to checking AI output. IBM is using AI to give new engineers harder assignments sooner. Neel Sundaresan, IBM’s general manager of automation and AI, says recent graduates now work on product features and projects once reserved for senior level engineers. AI helps implement and test the code, but if it fails, juniors assess what went wrong and fix the issues before the work is passed to senior developers for final approval. Sundaresan estimates that AI can help junior engineers perform 70 to 80 percent of some tasks that once required a senior engineer. Synthesia primarily hires mid- and senior-level engineers. Its less-experienced employees work with both a senior colleague and an AI agent, taking responsibility for parts of projects while learning to define what successful code should do. At Bonterra, agents now perform many of the well-defined coding tasks that once trained new engineers. Juniors instead own outcomes alongside experienced colleagues, learning to direct agents, question their output, and remain responsible for the result. She says this approach can help junior engineers build the skills and knowledge needed to advance in their careers. “If the industry stops hiring juniors, the industry stops producing seniors,” Korlepra said. From Your Site Articles Why AI Isn’t Ready to Be a Real Coder › AI Coding Is Going From Copilot to Autopilot › The Best AI Coding Tools You Can Use Right Now › Related Articles Around the Web AI Code Reviews | CodeRabbit | Try for Free. › AI Code - DeepAI › codingartificial intelligencevibe codingsoftware engineers Aaron Mok Aaron Mok is a freelance journalist covering AI, tech, and the workforce. He's based in New York City. AINewsBiomedical Google DeepMind Maps 9 Billion Possible DNA Variants 10h 3 min read RoboticsSponsored Article Protecting Dynamic Industrial Robot Cable Carriers 03 Sep 2026 3 min read TransportationMagazineFeature Rivian’s Gambit for Full Autonomy 11h 13 min read AIMagazineNewsJuly 2026 Claude Mythos Preview Requires New Ways to Keep Code Secure ComputingNews New Tool Enhances 3D Modeling for Visually Impaired AINewsComputing AI Tools to Convert C Code to Rust for Safety

来源报道 · 1 篇 · 以下链接均前往原始媒体

← 返回精选动态 原文

更多内容