Unit tests for utilities
- Integration tests for APIs
- E2E tests for critical flows
### 4. Security
- No hardcoded secrets
- Environment variables for sensitive data
- Validate all user inputs
- Parameterized queries only
Steady32 mentions in 2 weeks
2 projects use a version of this
246k2mo agoReviewMountCreate a free account to mount
agents (saves to `autogpt.yaml`) |
| **Deny** | Deny this command (saves to appropriate deny list) |
### Default Security
Out of the box, the following are **denied by default**:
- Reading sensitive files
Steady3 mentions in 2 weeks
No other project uses it yet
188k10d agoReviewMountCreate a free account to mount
CLAUDE.md
Guidance for Claude Code and other coding agents working in this repository.
## Security hardening for GitHub Actions
Workflow jobs in this repository that call Claude run with three protections
1 project uses a version of this
154k33d agoReviewMountCreate a free account to mount
listener rules, Unicode sanitization at egress,
SSE/CDP helpers, setup symlink hardening, and the sidebar security stack all
live there, each pinned by a CI tripwire.
**Egress receipts at every
Steady23 mentions in 2 weeks
No other project uses it yet
138k24d agoReviewMountCreate a free account to mount
Default policy:
- **Bug fixes** — backport to all active release lines _except the oldest_
- **Security fixes** — backport to all active release lines _including the oldest_
- **Features (semver/minor) and breaking changes (semver/major
No other project uses it yet
124k10d agoReviewMountCreate a free account to mount
A file Claude Code reads at the start of every session. It holds the commands, conventions and warnings the agent needs for this project.
Where does it go?
At the repository root. Claude Code also reads CLAUDE.md files in subdirectories when it works there.
What should it contain?
Build and test commands, the project's layout, conventions that aren't obvious from the code, and mistakes to avoid. Short files tend to work better than long ones.
CLAUDE.md or AGENTS.md?
Claude Code reads CLAUDE.md; most other agents read AGENTS.md. Many projects keep one and point the other at it.