Skip to content

Enable security-guidance Claude Code plugin via project settings - #7

Merged
duksh merged 1 commit into
mainfrom
claude/github-plugin-install-k6id0k
Aug 3, 2026
Merged

Enable security-guidance Claude Code plugin via project settings#7
duksh merged 1 commit into
mainfrom
claude/github-plugin-install-k6id0k

Conversation

@duksh

@duksh duksh commented Aug 3, 2026

Copy link
Copy Markdown
Owner

Adds a checked-in .claude/settings.json that enables the security-guidance plugin from the official Claude plugin marketplace (claude-plugins-official).

With this setting committed, the plugin is enabled for every Claude Code session on this repository — including Claude Code on the web, where user-scoped plugin installs don't apply. The plugin makes Claude automatically review its own code changes for common vulnerabilities (unsafe eval/exec, unsafe deserialization, injection, SSRF, weak cryptography, workflow-file edits) at three points: a fast pattern check on each edit, a model review of diffs at end of turn, and a deeper review on commit/push.

No runtime or packaging changes — this only affects Claude Code tooling behavior for people working in this repo.

🤖 Generated with Claude Code

https://claude.ai/code/session_01CoUkVhCJwc8a36bLc52n4q


Generated by Claude Code

Summary by CodeRabbit

  • Chores
    • Added security guidance tooling to support safer development practices.

Adds .claude/settings.json enabling the security-guidance plugin from
the official Claude plugin marketplace, so security review of code
changes runs automatically in Claude Code sessions (including web
sessions) for everyone using this repository.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CoUkVhCJwc8a36bLc52n4q
@coderabbitai

coderabbitai Bot commented Aug 3, 2026

Copy link
Copy Markdown

Review Change Stack

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 952937f0-6be4-46f0-8601-9cf2fd15be75

📥 Commits

Reviewing files that changed from the base of the PR and between 717e505 and 1ba548d.

📒 Files selected for processing (1)
  • .claude/settings.json

📝 Walkthrough

Walkthrough

The change adds Claude settings that enable the official security-guidance plugin.

Changes

Security guidance plugin

Layer / File(s) Summary
Enable security guidance plugin
.claude/settings.json
Claude settings enable security-guidance@claude-plugins-official.

Estimated code review effort: 1 (Trivial) | ~2 minutes

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch claude/github-plugin-install-k6id0k

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@duksh
duksh marked this pull request as ready for review August 3, 2026 05:52
@duksh
duksh merged commit 82071b4 into main Aug 3, 2026
57 of 58 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants