anthropics/claude-code-security-review

View on GitHub

An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities.

Stars: 6.2k
Forks: 683
Open beginner issues: 0
Indexed issues: 50

Dominant language: Python
License: MIT
Last GitHub push: Feb 11, 2026
Latest indexed: Sep 13, 2026
Contributing guide: No contributing guide
Code of conduct: No code of conduct
Beginner labels: No beginner labels indexed
PR merge metrics: No merged PRs in 30d

Open All

50 open issues indexed

Max subscription support Open

anthropics/claude-code-security-review#3 · 0 comments · 12 reactions · 0 assignees · Indexed Sep 13, 2026
Amazon Bedrock authentication support Open

anthropics/claude-code-security-review#4 · 2 comments · 33 reactions · 0 assignees · Indexed Sep 13, 2026
Support for Azure Devops? Open

anthropics/claude-code-security-review#6 · 1 comment · 1 reaction · 0 assignees · Indexed Sep 13, 2026
Feature Request: Allow triggering via PR comment Open

anthropics/claude-code-security-review#11 · 2 comments · 4 reactions · 0 assignees · Indexed Sep 13, 2026
Fix Claude CLI Execution on Windows for test_anthropic_api_key_handling Open

anthropics/claude-code-security-review#19 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Support for running with GCP Vertex AI Open

anthropics/claude-code-security-review#20 · 0 comments · 7 reactions · 0 assignees · Indexed Sep 13, 2026
Add support for running the action/script on Windows 11 self-hosted runner Open

anthropics/claude-code-security-review#23 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Update the security review command to identify Dependency Issues Open

anthropics/claude-code-security-review#31 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
How to ignore certain files from the security review Open

anthropics/claude-code-security-review#33 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Suggestion: Output at analysis start or final report, the security categories that the prompt is instructing Claude to ignore Open

anthropics/claude-code-security-review#36 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Action pinning Open

anthropics/claude-code-security-review#37 · 0 comments · 4 reactions · 0 assignees · Indexed Sep 13, 2026
Support for AWS bedrock? Open

anthropics/claude-code-security-review#39 · 1 comment · 15 reactions · 0 assignees · Indexed Sep 13, 2026
Feature Request: Cache behavior prevents reliable re-runs after addressing security findings Open

anthropics/claude-code-security-review#42 · 2 comments · 2 reactions · 0 assignees · Indexed Sep 13, 2026
Misconfiguration resulted in exclusion contradiction Open

anthropics/claude-code-security-review#44 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Make a release Open

anthropics/claude-code-security-review#45 · 0 comments · 5 reactions · 0 assignees · Indexed Sep 13, 2026
Support for Gitlab? Open

anthropics/claude-code-security-review#48 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Hi @Tsukimarf , can you elaborate on your request? Do you want a detailed description of the features that Tunix offer? Open

anthropics/claude-code-security-review#49 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
This PR changes the following: Open

anthropics/claude-code-security-review#50 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
## Overview Open

anthropics/claude-code-security-review#51 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
## Summary of Changes Open

anthropics/claude-code-security-review#52 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
<!-- Open

anthropics/claude-code-security-review#53 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
npm install for Claude Code is being deprecated - needs migration Open

anthropics/claude-code-security-review#58 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Running security review on Github Actions doesn't result in PR comments OR any output Open

anthropics/claude-code-security-review#63 · 0 comments · 1 reaction · 0 assignees · Indexed Sep 13, 2026
Claude filtering silently disabled due to deprecated Haiku model in validate_api_access Open

anthropics/claude-code-security-review#69 · 0 comments · 3 reactions · 0 assignees · Indexed Sep 13, 2026
Source Code review Scanning from Local Computer Open

anthropics/claude-code-security-review#72 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
file search tool where is it been configured? Open

anthropics/claude-code-security-review#74 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Bash command failed Open

anthropics/claude-code-security-review#75 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Silent failure on large PRs: 406 diff too large swallowed as 0 findings Open

anthropics/claude-code-security-review#80 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Missing security review guidance for SSRF Open

anthropics/claude-code-security-review#83 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Feature Request: Support reading security review prompts from `.claude/commands/` files Open

anthropics/claude-code-security-review#85 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
new Open

anthropics/claude-code-security-review#86 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
False positive filtering fails with 404: claude-3-5-haiku-20241022 model not found Open

anthropics/claude-code-security-review#88 · 0 comments · 2 reactions · 0 assignees · Indexed Sep 13, 2026
Feature Request: Add `github-token` input to control PR comment author Open

anthropics/claude-code-security-review#89 · 0 comments · 1 reaction · 0 assignees · Indexed Sep 13, 2026
Make API validation model configurable instead of hard-coding claude-3-5-haiku-20241022 Open

anthropics/claude-code-security-review#90 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
SAFETY: Claude Code lost user's .88 by blindly transferring USDC to a smart contract Open

anthropics/claude-code-security-review#91 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
I'm getting rate limited all the time Open

anthropics/claude-code-security-review#96 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
False-positive filter fails with 404: model 'claude-3-5-haiku-20241022' not found Open

anthropics/claude-code-security-review#103 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Feature Request: FREE33 as a fast pre-filter before Claude security analysis Open

anthropics/claude-code-security-review#111 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
security.yml suggested leaves open a vector for a possible supply chain attack Open

anthropics/claude-code-security-review#112 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
False-positive filter calls retired model claude-3-5-haiku-20241022 (404) — filter silently degraded; suggest configurable filter-model input Open

anthropics/claude-code-security-review#114 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Transitive actions target Node 20 (deprecated) — action.yml pins setup-python / cache / setup-node / upload-artifact at node20 versions Open

anthropics/claude-code-security-review#118 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Cache restore-keys prefix-match causes scans to silently skip new commits (false green) — root cause of #42 Open

anthropics/claude-code-security-review#120 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Opening Claude’s browser crashed its Electron GPU process Open

anthropics/claude-code-security-review#121 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
False-positive filter silently disabled since 2026-02-19: preflight hardcodes retired claude-3-5-haiku-20241022 Open

anthropics/claude-code-security-review#123 · 0 comments · 1 reaction · 0 assignees · Indexed Sep 13, 2026
`claudecode-timeout` input is not enforced — action runs past the configured limit on a stalled scan Open

anthropics/claude-code-security-review#124 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Install GitHub CLI step can hang the whole job on apt; gh is already present on GitHub-hosted runners Open

anthropics/claude-code-security-review#126 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
validate_api_access() hardcodes retired claude-3-5-haiku-20241022 — silently disables FP filtering since 2026-02-19 Open

anthropics/claude-code-security-review#127 · 0 comments · 1 reaction · 0 assignees · Indexed Sep 13, 2026
Silent findings_count=0 fallback when jq is unavailable can mask real findings Open

anthropics/claude-code-security-review#129 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
claude-model: claude-fable-5-1 fails with 400 because npm install -g resolves to a stale Claude Code CLI Open

anthropics/claude-code-security-review#132 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
validate_api_access() hardcodes retired claude-3-5-haiku-20241022, silently disabling false-positive filtering Open

anthropics/claude-code-security-review#139 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026

anthropics/claude-code-security-review

Get new issues in your inbox