False positive filtering fails with 404: claude-3-5-haiku-20241022 model not found #88

Description

The false positive filtering step fails because it tries to use claude-3-5-haiku-20241022, which has been deprecated/removed from the Anthropic API.

Error

From claudecode-error.log in the uploaded artifact:

[claudecode.claude_api_client] Claude API client initialized successfully
[claudecode.claude_api_client] Claude API validation failed: Error code: 404 - {'type': 'error', 'error': {'type': 'not_found_error', 'message': 'model: claude-3-5-haiku-20241022'}, 'request_id': 'req_011CZQFHwRgccRymNbBCTcBZ'}
[claudecode.findings_filter] Claude API validation failed: API validation failed: Error code: 404 - {'type': 'error', 'error': {'type': 'not_found_error', 'message': 'model: claude-3-5-haiku-20241022'}, 'request_id': 'req_011CZQFHwRgccRymNbBCTcBZ'}

Impact

The main security scan (Opus 4.1) works fine and produces findings. However, the secondary filtering step silently fails and falls back to "justification": "Claude filtering disabled", keeping all findings unfiltered:

"_filter_metadata": {
    "confidence_score": 10.0,
    "justification": "Claude filtering disabled"
}

This means the filtering feature is effectively broken for all users. It doesn't block the scan from working, but it means the false-positive reduction logic never runs.

Expected behavior

The filtering step should use a model that exists in the current Anthropic API catalog (e.g. claude-haiku-4-20250414 or similar).

Environment

• Action version: anthropics/claude-code-security-review@main (SHA 0c6a49f1fa56a1d472575da86a94dbc1edb78eda)
• Date: 2026-03-25
• Runner: ubuntu-latest (24.04)