claude-code-security-review

This GitHub Action integrates Claude Code into pull request workflows to perform automated security reviews of code changes. When a PR is opened, the action runs a Python-based audit pipeline that extracts the diff, sends changed files through Claude Code for semantic analysis, filters findings via a separate Claude API call to remove false positives, and posts inline review comments on the affected lines. The tool covers a broad range of vulnerability classes including SQL injection, XSS, hardcoded secrets, insecure deserialization, TOCTOU race conditions, and weak cryptography, and it works across any programming language. Configuration options include a custom false-positive filtering instructions file, a custom scan instructions file, selectable model (defaulting to claude-opus-4-1), and a per-commit execution toggle. A notable caveat in the documentation warns that the action is not hardened against prompt injection and should only run on PRs from trusted contributors. Security teams and DevOps engineers maintaining repositories on GitHub are the primary audience.

Despliega claude-code-security-review en tu cloud

Lleva este repo a producción en minutos. Cada plataforma genera su propio entorno con variables de entorno editables.

¿Mantienes este repo? Añade un badge a tu README

Pega el badge en tu README de GitHub para mostrar que está auditado por ClaudeWave. Cada badge enlaza de vuelta a esta página y muestra el Trust Score actual.

Markdown (README)Copiar

[![Featured on ClaudeWave](https://claudewave.com/api/badge/anthropics-claude-code-security-review)](https://claudewave.com/repo/anthropics-claude-code-security-review)

HTMLCopiar

<a href="https://claudewave.com/repo/anthropics-claude-code-security-review"><img src="https://claudewave.com/api/badge/anthropics-claude-code-security-review" alt="Featured on ClaudeWave: anthropics/claude-code-security-review" width="320" height="64" /></a>