Hacker News Reader

Are code reviews by non-programmers actually common? How can that possibly work?

I've seen 'code reviews' that were in fact functionality checks. So it's more like a 'check if this code works'.

And I can tell you: a web form capable of SQL-injections is still 'working code'. So it gets a positive 'code review'.

Sounds like there's no code being reviewed, how can it be called "code review"?

That's not a code review; that's either QA or UAT.

Bots that scan code for syntax/quality. While these are useful they should not qualify as a complete code review.