feat: claude code security review

[SimonvanWijhe]

No description provided.

[Copilot]

Pull request overview

Adds a reusable GitHub Actions workflow that runs Anthropic’s Claude Code Security Review on demand via workflow_call, using repository-specific security categories and false-positive filtering instructions tailored to the WordPress/Laravel + municipal/GDPR context.

Changes:

• Introduces a new reusable workflow to run automated security review and comment on PRs.
• Adds custom security category guidance for the scanner to prioritize project-relevant risks.
• Adds a starter template for false-positive filtering instructions.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 1 comment.

File	Description
.github/workflows/claude-code-security-review.yml	Adds the reusable “Security Review” workflow that checks out code and runs the Claude security review action, commenting on PRs.
.github/custom-security-categories.txt	Defines project-specific security categories (WP/Laravel, GDPR, integrations, Elasticsearch, secrets, headers, dependencies).
.github/false-positive-filtering.txt	Provides a scaffold for filtering guidance to reduce noisy findings.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.