An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities.
This GitHub Action integrates Claude Code into pull request workflows to perform automated security reviews of code changes. When a PR is opened, the action runs a Python-based audit pipeline that extracts the diff, sends changed files through Claude Code for semantic analysis, filters findings via a separate Claude API call to remove false positives, and posts inline review comments on the affected lines. The tool covers a broad range of vulnerability classes including SQL injection, XSS, hardcoded secrets, insecure deserialization, TOCTOU race conditions, and weak cryptography, and it works across any programming language. Configuration options include a custom false-positive filtering instructions file, a custom scan instructions file, selectable model (defaulting to claude-opus-4-1), and a per-commit execution toggle. A notable caveat in the documentation warns that the action is not hardened against prompt injection and should only run on PRs from trusted contributors. Security teams and DevOps engineers maintaining repositories on GitHub are the primary audience.
- ✓Open-source license (MIT)
- ✓Healthy fork ratio
- ✓Clear description
- ✓Trusted owner (anthropics)
- ✓Mature repo (>1y old)
- !Inactive (>180d)
git clone https://github.com/anthropics/claude-code-security-reviewResumen de Tools
Lo que la gente pregunta sobre claude-code-security-review
¿Qué es anthropics/claude-code-security-review?
+
anthropics/claude-code-security-review es tools para el ecosistema de Claude AI. An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities. Tiene 6.2k estrellas en GitHub y su última actualización registrada es del 2026-02-11.
¿Cómo se instala claude-code-security-review?
+
Puedes instalar claude-code-security-review clonando el repositorio (https://github.com/anthropics/claude-code-security-review) o siguiendo las instrucciones del README en GitHub. ClaudeWave también te ofrece bloques de instalación rápida en esta misma página.
¿Es seguro usar anthropics/claude-code-security-review?
+
Nuestro agente de seguridad ha analizado anthropics/claude-code-security-review y le ha asignado un Trust Score de 89/100 (tier: Trusted). Revisa el desglose completo de comprobaciones superadas y flags en esta página.
¿Quién mantiene anthropics/claude-code-security-review?
+
anthropics/claude-code-security-review es mantenido por anthropics. La última actividad registrada en GitHub es del 2026-02-11, con 94 issues abiertos.
¿Hay alternativas a claude-code-security-review?
+
Sí. En ClaudeWave puedes explorar tools similares en /categories/tools, ordenados por popularidad o actividad reciente.
Despliega claude-code-security-review en tu cloud
Lleva este repo a producción en minutos. Cada plataforma genera su propio entorno con variables de entorno editables.
¿Mantienes este repo? Añade un badge a tu README
Pega el badge en tu README de GitHub para mostrar que está auditado por ClaudeWave. Cada badge enlaza de vuelta a esta página y muestra el Trust Score actual.
[](https://claudewave.com/repo/anthropics-claude-code-security-review)<a href="https://claudewave.com/repo/anthropics-claude-code-security-review"><img src="https://claudewave.com/api/badge/anthropics-claude-code-security-review" alt="Featured on ClaudeWave: anthropics/claude-code-security-review" width="320" height="64" /></a>Más Tools
A single CLAUDE.md file to improve Claude Code behavior, derived from Andrej Karpathy's observations on LLM coding pitfalls.
An AI skill that provides design intelligence for building professional UI/UX across multiple platforms.
🪨 why use many token when few token do trick — Claude Code skill that cuts 65% of tokens by talking like caveman
CLI proxy that reduces LLM token consumption by 60-90% on common dev commands. Single Rust binary, zero dependencies
The fastest, litest AI Gateway. Rust core with Python SDK. Call 100+ LLM APIs in OpenAI (or native) format with cost tracking, guardrails, load balancing, and logging [Bedrock, Azure, OpenAI, Anthropic, OpenAI, VertexAI, vLLM, Nvidia NIM]
Use Claude Code, Codex, Pi, and OpenCode (and 6 other harnesses) for free (1.3B+ free tokens) from your terminal, app, IDE, or phone, and now from the browser with native browser sessions (multi-harness + multi-model) like OpenClaw (voice supported + ToS friendly)