Issues

• Action calls retired claude-3-5-haiku-20241022, generating failing API requests for every user

  anthropics/claude-code-security-review#154 · Filter by author CodeisFuture1 opened on Oct 4, 2026

• Opus 5.5 fails: action installs Claude Code 2.1.197 (Node 18), needs >= 2.1.280 — and the check stays green

  anthropics/claude-code-security-review#152 · Filter by author AlexJ-private opened on Sep 23, 2026

• custom-security-scan-instructions silently ignores documented relative paths

  anthropics/claude-code-security-review#151 · Filter by author rplusq opened on Sep 22, 2026

• validate_api_access() hardcodes retired claude-3-5-haiku-20241022, silently disabling false-positive filtering

  anthropics/claude-code-security-review#139 · Filter by author gioramorein opened on Sep 7, 2026

• claude-model: claude-fable-5-1 fails with 400 because npm install -g resolves to a stale Claude Code CLI

  anthropics/claude-code-security-review#132 · Filter by author sibljon opened on Sep 4, 2026

• Silent findings_count=0 fallback when jq is unavailable can mask real findings

  anthropics/claude-code-security-review#129 · Filter by author kevingorman1000 opened on Aug 31, 2026

• validate_api_access() hardcodes retired claude-3-5-haiku-20241022 — silently disables FP filtering since 2026-02-19

  anthropics/claude-code-security-review#127 · Filter by author dcyfr opened on Aug 29, 2026

• Install GitHub CLI step can hang the whole job on apt; gh is already present on GitHub-hosted runners

  anthropics/claude-code-security-review#126 · Filter by author QTSPTBGN opened on Aug 20, 2026

• claudecode-timeout input is not enforced — action runs past the configured limit on a stalled scan

  anthropics/claude-code-security-review#124 · Filter by author buzbrain opened on Aug 19, 2026

• False-positive filter silently disabled since 2026-02-19: preflight hardcodes retired claude-3-5-haiku-20241022

  anthropics/claude-code-security-review#123 · Filter by author dsalas-crogl opened on Jul 30, 2026

• Opening Claude’s browser crashed its Electron GPU process

  anthropics/claude-code-security-review#121 · Filter by author ssanaullahrais opened on Jul 27, 2026
  4

• Cache restore-keys prefix-match causes scans to silently skip new commits (false green) — root cause of #42

  anthropics/claude-code-security-review#120 · Filter by author rhadiaris opened on Jul 20, 2026

• Transitive actions target Node 20 (deprecated) — action.yml pins setup-python / cache / setup-node / upload-artifact at node20 versions

  anthropics/claude-code-security-review#118 · Filter by author mitracrm-ci opened on Jul 13, 2026

• False-positive filter calls retired model claude-3-5-haiku-20241022 (404) — filter silently degraded; suggest configurable filter-model input

  anthropics/claude-code-security-review#114 · Filter by author kevinjbeattie opened on Jun 20, 2026

• security.yml suggested leaves open a vector for a possible supply chain attack

  anthropics/claude-code-security-review#112 · Filter by author s1x7y opened on Jun 7, 2026
  1

• Feature Request: FREE33 as a fast pre-filter before Claude security analysis

  anthropics/claude-code-security-review#111 · Filter by author BARRYPMARSHALL opened on Jun 7, 2026

• False-positive filter fails with 404: model 'claude-3-5-haiku-20241022' not found

  anthropics/claude-code-security-review#103 · Filter by author RoninDevs opened on May 5, 2026

• I'm getting rate limited all the time

  anthropics/claude-code-security-review#96 · Filter by author R-drg opened on Apr 28, 2026

• SAFETY: Claude Code lost user's .88 by blindly transferring USDC to a smart contract

  anthropics/claude-code-security-review#91 · Filter by author wocaoac-cpu opened on Apr 12, 2026

• Make API validation model configurable instead of hard-coding claude-3-5-haiku-20241022

  anthropics/claude-code-security-review#90 · Filter by author adamisom-at-arbor opened on Apr 3, 2026

• Feature Request: Add github-token input to control PR comment author

  anthropics/claude-code-security-review#89 · Filter by author cdans opened on Mar 31, 2026

• False positive filtering fails with 404: claude-3-5-haiku-20241022 model not found

  anthropics/claude-code-security-review#88 · Filter by author adv0r opened on Mar 25, 2026

• new

  anthropics/claude-code-security-review#86 · Filter by author qiqiq1995 opened on Mar 21, 2026

• Feature Request: Support reading security review prompts from .claude/commands/ files

  anthropics/claude-code-security-review#85 · Filter by author joshueis opened on Mar 16, 2026

• Missing security review guidance for SSRF

  anthropics/claude-code-security-review#83 · Filter by author 247arjun opened on Mar 10, 2026