claude-code-security-review
An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities.
- 6.5k stars
- 732 forks
- 104 open issues
- Language: Python
- License: MIT
- updated
Install
git clone https://github.com/anthropics/claude-code-security-review- Clone the repository.
- Follow the README for installation and usage instructions.
Editor's note
This GitHub Action integrates Claude Code into pull request workflows to perform automated security reviews of code changes. When a PR is opened, the action runs a Python-based audit pipeline that extracts the diff, sends changed files through Claude Code for semantic analysis, filters findings via a separate Claude API call to remove false positives, and posts inline review comments on the affected lines. The tool covers a broad range of vulnerability classes including SQL injection, XSS, hardcoded secrets, insecure deserialization, TOCTOU race conditions, and weak cryptography, and it works across any programming language. Configuration options include a custom false-positive filtering instructions file, a custom scan instructions file, selectable model (defaulting to claude-opus-4-1), and a per-commit execution toggle. A notable caveat in the documentation warns that the action is not hardened against prompt injection and should only run on PRs from trusted contributors. Security teams and DevOps engineers maintaining repositories on GitHub are the primary audience.
Tools overview
What people ask about claude-code-security-review
What is anthropics/claude-code-security-review?
anthropics/claude-code-security-review is tools for the Claude AI ecosystem. An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities. It has 6.5k GitHub stars and its last recorded update is dated 2026-02-11.
How do I install claude-code-security-review?
You can install claude-code-security-review by cloning the repository (https://github.com/anthropics/claude-code-security-review) or following the README instructions on GitHub. ClaudeWave also provides quick install blocks on this page.
Is anthropics/claude-code-security-review safe to use?
Our security agent has analyzed anthropics/claude-code-security-review and assigned a Trust Score of 89/100 (tier: Trusted). See the full breakdown of passed checks and flags on this page.
Who maintains anthropics/claude-code-security-review?
anthropics/claude-code-security-review is maintained by anthropics. The last recorded GitHub activity is dated 2026-02-11, with 104 open issues.
Are there alternatives to claude-code-security-review?
Yes. On ClaudeWave you can browse similar tools at /categories/tools, sorted by popularity or recent activity.