Title: VIP Code Analysis Bot
Author: WordPress VIP Documentation
Published: October 7, 2021
Last modified: December 31, 2025

---

#  VIP Code Analysis Bot

The VIP Code Analysis Bot (“the Bot”) automatically analyzes code in pull requests
that are made to any branch of [a WordPress application’s wpcomvip GitHub repository](https://docs.wpvip.com/code-deployment/github-repository/).
The Bot helps to maintain the quality of code that is submitted to the repository
and increases the security and stability of WordPress sites that are hosted on the
VIP Platform. 

The Bot is triggered and managed by an internal Continuous Integration (CI) software
and is set up to run specific scanners: [Vulnerability and Update Scan](https://docs.wpvip.com/vulnerability-and-update-scan/),
[PHPCS analysis](https://docs.wpvip.com/vip-code-analysis-bot/phpcs-analysis/), 
[PHP linting](https://docs.wpvip.com/vip-code-analysis-bot/php-linting/), and [SVG analysis](https://docs.wpvip.com/vip-code-analysis-bot/svg-analysis/).
The Bot also asks internal APIs for data and performs some checks on its own. Results
are reported in easily readable GitHub [feedback and comments](https://docs.wpvip.com/vip-code-analysis-bot/feedback/).
Some pull request can be [automatically approved](https://docs.wpvip.com/vip-code-analysis-bot/auto-approvals/)
by the Bot.

The Bot is a [software bundle](https://github.com/automattic/vip-go-ci/) under active
development, maintained by VIP. Suggestions for improvements can be submitted through
[VIP’s Feedback Portal](https://docs.wpvip.com/vip-support/vip-product-feedback/).

 * 
   ### 󠀁[Bot feedback and messages](https://docs.wpvip.com/vip-code-analysis-bot/feedback/)󠁿
   
 * Feedback from the VIP Code Analysis Bot is based on the results of the automated
   scans including Vulnerability and Update Scan, PHPCS analysis, PHP linting, and
   SVG analysis.
 * 
   ### 󠀁[PHPCS analysis](https://docs.wpvip.com/vip-code-analysis-bot/phpcs-analysis/)󠁿
   
 * The Bot analyzes all PHP and JavaScript files altered or created in submitted
   pull requests using PHP_CodeSniffer (PHPCS).
 * 
   ### 󠀁[Auto approvals](https://docs.wpvip.com/vip-code-analysis-bot/auto-approvals/)󠁿
   
 * Several determinants are used by the VIP Code Analysis Bot to calculate whether
   a pull request can be automatically approved.
 * 
   ### 󠀁[VIP Code Analysis Bot status](https://docs.wpvip.com/vip-code-analysis-bot/build-status/)󠁿
   
 * The GitHub interface will display a “Pending — In progress” build status while
   the VIP Code Analysis Bot is analyzing a pull request.
 * 
   ### 󠀁[SVG analysis](https://docs.wpvip.com/vip-code-analysis-bot/svg-analysis/)󠁿
   
 * All SVG files introduced or altered in pull requests are scanned by an SVG scanner.
   The scanner will flag any non-whitelisted attributes or tags and report them 
   in the automated code review by the Bot. 
 * 
   ### 󠀁[PHP linting](https://docs.wpvip.com/vip-code-analysis-bot/php-linting/)󠁿
   
 * The VIP Code Analysis Bot runs the PHP linter that is bundled with PHP to highlight
   code syntax and compilation errors.
 * 
   ### 󠀁[Default behavior of the Bot](https://docs.wpvip.com/vip-code-analysis-bot/default-behavior/)󠁿
   
 * The VIP Code Analysis Bot analyzes and reviews pull requests that are created
   in WordPress application repositories that exist within the WordPress VIP GitHub
   organization.
 * 
   ### 󠀁[Customize the VIP Code Analysis Bot](https://docs.wpvip.com/vip-code-analysis-bot/customize-the-bot/)󠁿
   
 * The VIP Code Analysis Bot can be customized by adding configuration options to
   a JSON file that is located within the root of an application’s wpcomvip GitHub
   repository.
 * 
   ### 󠀁[Customize PHPCS scanning](https://docs.wpvip.com/vip-code-analysis-bot/customize-phpcs/)󠁿
   
 * PHPCS analysis is run against code in all relevant files of a pull request by
   default. Methods are available to modify some aspects of the PHPCS analysis.

Last updated: December 31, 2025