OSSanthropics/claude-code-security-review — Official Security Review GitHub ActionGitHub·high signalXBlueskyLinkedInCopy linkLaunched alongside Claude Code Security. Performs context-aware security analysis on PR diffs. Detects 10+ vulnerability categories. Diff-aware, false-positive filtering, custom scanning instructions. 3K stars on launch day.SourceSource pageGitHub↳ Follow the threadPolicy dependency / Stack layerOrdewell uses a read-only coding agent as planner, then spawns per-task agent sessions gated by a marker-based verdict engineGitHubStack layer / Threat patternnanobot has 570 open pull requests against 215 issues, a 2.6:1 inversion on a seven-month-old repoGitHubPolicy dependency / Stack layerOverlapping VS Code extension writes were leaving ~/.claude/settings.json unparseableGitHubStack layer / Threat patternClaude Code 2.1.273 Stops Loading a Repo-Chosen Memory Directory Into the Prompt Under Read BlockingAnthropic (claude-code releases)Policy dependency / Stack layerCodex makes Code Mode wrappers transparent to Guardian policy and adds read-only policy to MCP tool requestsGitHubPolicy dependency / Stack layerTip: Claude Code's Bash tool was re-sourcing your shell profile after every plugin reloadClaude Code ChangelogStack layer / Threat patternClaude Code's /code-review drops multi-subagent fan-out for leaner inline prompts on untuned modelsGitHubStack layer / Threat patternClaude Code makes the v2 MCP client and 2026-07-28 negotiation the default on Bedrock, Vertex and FoundryGitHub