Skip to content

Claude Code Security Scanning & Fixing #1080

Description

@stdavis

Benefit

Anthropic has provided the State with $100,000 of tokens for security scanning and fixing for six months. I think that it will end at around the end of 2026. This is an opportunity to make sure that some of our more high profile or sensitive projects are up-to-snuff.

Acceptance Criteria

  • [ ]

Notes

Risks

Issue Reference

Activity

  1. self-assigned this
    on Sep 24, 2026
  2. moved this from Backlog to On Deck in UGRC PI Planning Featureson Sep 24, 2026
  3. added theissue type on Sep 24, 2026
  4. stdavis commented on Oct 14, 2026

    @stdavis
    MemberAuthor

    Scanning results for the Web API:

    Severity Count
    Critical 0
    High 2
    Medium 13
    Low 4

    Fixes for the two high vulnerabilities were deployed to production last night.

  5. moved this from On Deck to In Progress in UGRC PI Planning Featureson Oct 14, 2026
  6. stdavis commented on Oct 14, 2026

    @stdavis
    MemberAuthor

    Scanning results for the dev branch of roadkill-mobile:

    Severity Count
    Critical 0
    High 0
    Medium 3
    Low 5

    Fixes for the medium's are on the dev branch and will be included in the next release.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

No labels
No labels

Projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions