anthropics/claude-code

3 other commands the scanner could not classify

Commands from CI steps and task runners that look like checks but match no known tool. Some are checks, some are not.

• claude plugin test $mod
• python .github/scripts/check_workflow_hardening.py
• skipping the test step"

full scan as JSON

• Fail fast principleWhen writing security-sensitive shell scripts, use strict error handling to fail immediately on errors rather than attempting fallbacks o...

  anthropics/claude-code Error Handling Shell ai-agents 2025-03-23

  copy raw open
• Pin dependency versionsAlways pin external dependencies to specific commit hashes rather than mutable references like tags or branch names to prevent supply cha...

  anthropics/claude-code Security Yaml ai-agents 2025-05-29

  copy raw open
• Least privilege networkingRestrict network access to only what's necessary for your application to function, using explicit allowlisting rather than trying to bloc...

  anthropics/claude-code Security Shell ai-agents 2025-03-12

  copy raw open
• Avoid privileged installationsAlways recommend user-level package installations rather than using administrative/root privileges. Installing packages with elevated per...

  anthropics/claude-code Security Markdown ai-agents 2025-02-28

  copy raw open