Verification · Code review
Review question checklists
A fixed bank of questions a reviewer must answer for a kind of change, ranked so the most relevant ones are asked first.
Sub-techniques
-
Universal questions
V1040.001Questions that apply to any change: error handling, tests, naming.
-
Behavioural questions
V1040.002Questions about what changes for users and callers.
-
Security requirement checklists
V1040.003Verification requirements per area from a standard such as OWASP ASVS.
How to build it
- Start from a published checklist and keep only questions your reviews actually raise.
- Tag each question with the kinds of change it applies to.
- Rank by relevance to the diff and ask the top few.
Signals in a repository
- PR templates with checkbox lists, or review guidelines in CONTRIBUTING.md.