Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
anthropics
/
claude-code-security-review
Public
Notifications
You must be signed in to change notification settings
Fork
688
Star
6.3k
Code
Issues
50
Pull requests
47
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Actions
Projects
Security and quality
Insights
Actions: anthropics/claude-code-security-review
Actions
All workflows
Workflows
Copilot code review
Copilot code review
SAST
SAST
Test ClaudeCode Integration
Test ClaudeCode Integration
Show more workflows...
Management
Caches
All workflows
All workflows
Actions
Loading...
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading.
Please reload this page
.
will be ignored since log searching is not yet available
Showing runs from all workflows
will be ignored since log searching is not yet available
113 workflow runs
113 workflow runs
Workflow
Filter by Workflow
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching workflows.
Event
Filter by Event
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching events.
Status
Filter by Status
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching statuses.
Branch
Filter by Branch
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching branches.
Actor
Filter by Actor
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching users.
fix: validate API access with the configured Claude model
SAST
#102:
Pull request
#149
opened by
00200200
Action required
00200200:codex/security-validation-model
00200200:codex/security-validation-model
Action required
View #149
View workflow file
fix: validate API access with the configured Claude model
Test ClaudeCode Integration
#151:
Pull request
#149
opened by
00200200
Action required
00200200:codex/security-validation-model
00200200:codex/security-validation-model
Action required
View #149
View workflow file
fix: enforce audit timeout across retries
Test ClaudeCode Integration
#150:
Pull request
#148
opened by
00200200
Action required
00200200:codex/enforce-total-timeout
00200200:codex/enforce-total-timeout
Action required
View #148
View workflow file
fix: enforce audit timeout across retries
SAST
#101:
Pull request
#148
opened by
00200200
Action required
00200200:codex/enforce-total-timeout
00200200:codex/enforce-total-timeout
Action required
View #148
View workflow file
fix: update pinned actions to Node 24 runtimes
Test ClaudeCode Integration
#149:
Pull request
#147
opened by
00200200
Action required
00200200:codex/update-node24-actions
00200200:codex/update-node24-actions
Action required
View #147
View workflow file
fix: update pinned actions to Node 24 runtimes
SAST
#100:
Pull request
#147
opened by
00200200
Action required
00200200:codex/update-node24-actions
00200200:codex/update-node24-actions
Action required
View #147
View workflow file
Avoid apt install for preinstalled gh
SAST
#99:
Pull request
#146
opened by
00200200
Action required
00200200:codex/avoid-apt-gh-install
00200200:codex/avoid-apt-gh-install
Action required
View #146
View workflow file
Avoid apt install for preinstalled gh
Test ClaudeCode Integration
#148:
Pull request
#146
opened by
00200200
Action required
00200200:codex/avoid-apt-gh-install
00200200:codex/avoid-apt-gh-install
Action required
View #146
View workflow file
Fail when jq cannot parse scan results
Test ClaudeCode Integration
#147:
Pull request
#145
opened by
00200200
Action required
00200200:codex/fail-when-jq-unavailable
00200200:codex/fail-when-jq-unavailable
Action required
View #145
View workflow file
Fail when jq cannot parse scan results
SAST
#98:
Pull request
#145
opened by
00200200
Action required
00200200:codex/fail-when-jq-unavailable
00200200:codex/fail-when-jq-unavailable
Action required
View #145
View workflow file
fix: honor an explicit zero retry limit in ClaudeAPIClient
Test ClaudeCode Integration
#146:
Pull request
#144
opened by
00200200
Action required
00200200:codex/security-zero-retry-limit
00200200:codex/security-zero-retry-limit
Action required
View #144
View workflow file
fix: honor an explicit zero retry limit in ClaudeAPIClient
SAST
#97:
Pull request
#144
opened by
00200200
Action required
00200200:codex/security-zero-retry-limit
00200200:codex/security-zero-retry-limit
Action required
View #144
View workflow file
fix: normalize trailing slashes in excluded directories
SAST
#96:
Pull request
#143
opened by
00200200
-1s
00200200:codex/security-excluded-directory-slashes
00200200:codex/security-excluded-directory-slashes
-1s
View #143
View workflow file
fix: normalize trailing slashes in excluded directories
Test ClaudeCode Integration
#145:
Pull request
#143
opened by
00200200
-1s
00200200:codex/security-excluded-directory-slashes
00200200:codex/security-excluded-directory-slashes
-1s
View #143
View workflow file
fix: parse embedded JSON without counting braces inside strings
SAST
#95:
Pull request
#142
opened by
00200200
Action required
00200200:codex/security-json-string-braces
00200200:codex/security-json-string-braces
Action required
View #142
View workflow file
fix: parse embedded JSON without counting braces inside strings
Test ClaudeCode Integration
#144:
Pull request
#142
opened by
00200200
Action required
00200200:codex/security-json-string-braces
00200200:codex/security-json-string-braces
Action required
View #142
View workflow file
Scan large pull requests, check the key on the configured model, fail when the scan did not run
SAST
#94:
Pull request
#140
opened by
thodyu
Action required
Freehold-Web-Solutions:fix/large-pr-diff-and-filter-model
Freehold-Web-Solutions:fix/large-pr-diff-and-filter-model
Action required
View #140
View workflow file
Scan large pull requests, check the key on the configured model, fail when the scan did not run
Test ClaudeCode Integration
#143:
Pull request
#140
opened by
thodyu
Action required
Freehold-Web-Solutions:fix/large-pr-diff-and-filter-model
Freehold-Web-Solutions:fix/large-pr-diff-and-filter-model
Action required
View #140
View workflow file
Make claudecode-timeout actually bound the analysis
SAST
#93:
Pull request
#138
opened by
CedricConday
6d 19h 53m 18s
CedricConday:fix/claudecode-timeout-not-enforced
CedricConday:fix/claudecode-timeout-not-enforced
6d 19h 53m 18s
View #138
View workflow file
Make claudecode-timeout actually bound the analysis
Test ClaudeCode Integration
#142:
Pull request
#138
opened by
CedricConday
6d 19h 53m 18s
CedricConday:fix/claudecode-timeout-not-enforced
CedricConday:fix/claudecode-timeout-not-enforced
6d 19h 53m 18s
View #138
View workflow file
Do not skip a commit because an earlier commit's marker was restored
Test ClaudeCode Integration
#141:
Pull request
#137
opened by
CedricConday
6d 19h 53m 19s
CedricConday:fix/cache-restore-keys-false-green
CedricConday:fix/cache-restore-keys-false-green
6d 19h 53m 19s
View #137
View workflow file
Do not skip a commit because an earlier commit's marker was restored
SAST
#92:
Pull request
#137
opened by
CedricConday
6d 19h 53m 19s
CedricConday:fix/cache-restore-keys-false-green
CedricConday:fix/cache-restore-keys-false-green
6d 19h 53m 19s
View #137
View workflow file
Move the pinned first-party actions off the node20 runtime
Test ClaudeCode Integration
#140:
Pull request
#136
opened by
CedricConday
6d 19h 53m 29s
CedricConday:fix/node20-action-pins
CedricConday:fix/node20-action-pins
6d 19h 53m 29s
View #136
View workflow file
Move the pinned first-party actions off the node20 runtime
SAST
#91:
Pull request
#136
opened by
CedricConday
6d 19h 53m 28s
CedricConday:fix/node20-action-pins
CedricConday:fix/node20-action-pins
6d 19h 53m 28s
View #136
View workflow file
Fail loudly when scan results cannot be parsed
Test ClaudeCode Integration
#139:
Pull request
#135
opened by
CedricConday
6d 19h 53m 29s
CedricConday:fix/jq-missing-silent-zero
CedricConday:fix/jq-missing-silent-zero
6d 19h 53m 29s
View #135
View workflow file
Previous
1
2
3
4
5
Next
You can’t perform that action at this time.