defending-code-reference-harness

Why we included this project

Anthropic built this as a working reference for automating vulnerability discovery and remediation with Claude, and it shows the actual loop they used with real security teams. You get Claude Code skills for scoping, scanning, triaging, and patching, plus an autonomous pipeline that runs recon through report stages against C/C++ code using Docker and ASAN. The repo is honest about its limits: it is a reference, not a product, and will not work on every codebase without adaptation. What makes it worth looking at is the reusable structure, with prompts and sandboxing documented well enough to port to your own language, detector, or vulnerability class. If you have access to Claude APIs through Bedrock, Vertex, or Azure, this is a solid starting point for building your own pipeline rather than a drop-in scanner.