--- title: "Looks Good to Me": A Practical Guide to Handling... description: A conference talk by a Red Hat security engineer covering how to handle AI-generated code contributions in open source and enterprise settings. It opens with... canonical: https://daily.dev/posts/looks-good-to-me-a-practical-guide-to-handling-ai-generated-code---roman-zhukov-ktkzl4uqv twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: "Looks Good to Me": A Practical Guide to Handling AI-Generated Code - Roman Zhukov | daily.dev og:description: A conference talk by a Red Hat security engineer covering how to handle AI-generated code contributions in open source and enterprise settings. It opens with... og:url: https://daily.dev/posts/looks-good-to-me-a-practical-guide-to-handling-ai-generated-code---roman-zhukov-ktkzl4uqv og:image: https://api.daily.dev/og/posts/KTKzl4uQV.png og:image:alt: "Looks Good to Me": A Practical Guide to Handling AI-Generated Code - Roman Zhukov og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # "Looks Good to Me": A Practical Guide to Handling AI-Generated Code - Roman Zhukov **[NDC Conferences](https://daily.dev/sources/ndc)** · 60 min read · 0 upvotes · 0 comments ## Summary A conference talk by a Red Hat security engineer covering how to handle AI-generated code contributions in open source and enterprise settings. It opens with real-world examples of AI bots autonomously submitting PRs and fake vulnerability reports, then proposes four pillars: clear AI contribution policy, secure AI coding guidelines, automation/quality gates, and accelerated vulnerability triage. Practical recommendations include publishing a short AI coding policy (60–130 words), using OpenSSF secure AI coding guides, adopting tools like PQSS anti-slop for PR filtering and AI-assisted code review skills catalogs, and leveraging AI for vulnerability triage as CVE report volumes grow exponentially. The talk emphasizes that AI tools make code generation cheap but not code review, and that deterministic automation should not be replaced wholesale by AI. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [AI Code Review Best Practices](https://daily.dev/posts/ai-code-review-best-practices-ii7hbaa3j) · Aviator Blog · 15 upvotes · 1 comments - [How to Evaluate AI Code Quality: A Practical Guide for Engineers](https://daily.dev/posts/how-to-evaluate-ai-code-quality-a-practical-guide-for-engineers-rbtcmfynl) · freeCodeCamp · 0 upvotes · 0 comments - [From AI slop to AI empowerment: raising the bar for open-source contributions](https://daily.dev/posts/from-ai-slop-to-ai-empowerment-raising-the-bar-for-open-source-contributions-jzu1sd35d) · Adafruit Blog · 1 upvotes · 0 comments - [AI-Generated Code in Production: Can It Really Be Trusted?](https://daily.dev/posts/ai-generated-code-in-production-can-it-really-be-trusted--uszaxywbi) · Medium · 1 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#open-source](https://daily.dev/tags/open-source), [#ai-coding](https://daily.dev/tags/ai-coding), [#ai-assisted-development](https://daily.dev/tags/ai-assisted-development) [View this post on daily.dev](https://daily.dev/posts/looks-good-to-me-a-practical-guide-to-handling-ai-generated-code---roman-zhukov-ktkzl4uqv) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"\"Looks Good to Me\": A Practical Guide to Handling AI-Generated Code - Roman Zhukov","url":"https://daily.dev/posts/looks-good-to-me-a-practical-guide-to-handling-ai-generated-code---roman-zhukov-ktkzl4uqv","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/looks-good-to-me-a-practical-guide-to-handling-ai-generated-code---roman-zhukov-ktkzl4uqv"},"datePublished":"2026-07-31T10:39:44.635Z","dateModified":"2026-08-02T03:16:45.968Z","description":"A conference talk by a Red Hat security engineer covering how to handle AI-generated code contributions in open source and enterprise settings. It opens with...","image":"https://i.ytimg.com/vi/LnZDY6XC5pA/sddefault.jpg","thumbnailUrl":"https://i.ytimg.com/vi/LnZDY6XC5pA/sddefault.jpg","isAccessibleForFree":true,"articleSection":"NDC Conferences","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"NDC Conferences","logo":"https://media.daily.dev/image/upload/s--SiIyojEj--/f_auto/v1748760369/logos/ndc","url":"https://daily.dev/sources/ndc"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/looks-good-to-me-a-practical-guide-to-handling-ai-generated-code---roman-zhukov-ktkzl4uqv","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,open-source,ai-coding,ai-assisted-development","timeRequired":"PT60M","video":{"@type":"VideoObject","name":"\"Looks Good to Me\": A Practical Guide to Handling AI-Generated Code - Roman Zhukov","description":"A conference talk by a Red Hat security engineer covering how to handle AI-generated code contributions in open source and enterprise settings. It opens with...","thumbnailUrl":"https://i.ytimg.com/vi/LnZDY6XC5pA/sddefault.jpg","uploadDate":"2026-07-31T10:39:44.635Z","duration":"PT60M","url":"https://api.daily.dev/r/KTKzl4uQV","embedUrl":"https://www.youtube.com/embed/LnZDY6XC5pA"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"NDC Conferences","item":"https://daily.dev/sources/ndc"},{"@type":"ListItem","position":3,"name":"\"Looks Good to Me\": A Practical Guide to Handling AI-Generated Code - Roman Zhukov"}]} ```