OneRedOak/claude-code-workflows
Claude Code Workflows
This project is a suite of automated tools and an LLM code review framework designed for design auditing, security scanning, and AI-driven code analysis. It functions as a developer workflow orchestrator that uses static analysis agents and agent-based workflows to automate pull request analysis and security audits.
The system employs a dual-loop agent architecture to coordinate primary analysis and secondary verification, reducing false positives. It distinguishes itself through the use of browser automation to perform live UI component testing and verify frontend changes against accessibility standards and brand guidelines.
The framework integrates into CI/CD pipelines to trigger automated security reviews and code audits before human intervention. It covers a broad range of capabilities including third-party dependency auditing, severity-based vulnerability classification, and the enforcement of organization-specific engineering standards and security policies.
Features
- Critic Agent Loops - Employs a dual-loop architecture using critic-agent loops to coordinate primary analysis and secondary verification.
- Agentic Code Reviews - Employs a dual-loop agent architecture to automate pull request analysis and security audits using LLMs.
- Review Customization - Allows customization of review prompts and categories to match organization-specific architectural and quality standards.
- Automated Code Review - Integrates automated review agents into CI/CD pipelines to provide feedback on pull requests.
- Security and Vulnerability Scanning - Detects vulnerabilities, exposed secrets, and risky external dependencies in code changes using industry standards.
- Pull Request Analysis Agents - Uses AI-driven agents triggered via CI actions to perform deep reasoning and analysis of pull request modifications.
- Development Workflow Orchestrators - Implements an orchestrator using slash commands and agents to coordinate on-demand code and architectural reviews.
- Vulnerability Review Scanners - Performs automated security reviews on pull requests to identify vulnerabilities and exposed secrets.
- Security Scanning Integrations - Embeds automated security vulnerability scanning into CI/CD pipelines for inline feedback on pull requests.
- CI Pipeline Integrations - Triggers automated code and security analysis within deployment pipelines to validate changes before human review.
- Automated - Verifies frontend code against design principles and accessibility standards via automated scanning of code and URLs.
- CI/CD - Provides automated detection of vulnerabilities and secrets specifically integrated into CI/CD pipelines.
- Coding Convention Engines - Applies organization-specific coding conventions and design guidelines to tailor the automated review process.
- Coding Standards Enforcement - Enforces organization-specific coding conventions and design principles across the codebase through automated audits.
- Automated Design Audits - Assesses front-end changes against established design principles and user experience standards during pull requests.
- Browser Automation - Provides tools for simulating user interactions in web browsers to verify frontend visual behavior and accessibility standards.
- Automated Code Review - Runs automated agents to check pull requests for bugs, style guide adherence, and architectural patterns.
- Component and Interaction Testing - Interacts with live UI elements using browser automation to verify visual behavior and interactive functionality.
- Visual Compliance Validations - Checks user interface changes against brand guidelines and accessibility standards using browser automation.
- Slash Command Analysis Triggers - Implements specialized slash commands to execute instant code analysis on specific commits or pull requests.
- Finding Classification - Categorizes and prioritizes security vulnerabilities and bugs by risk level to guide remediation.
- Dependency Vulnerability Scanning - Includes utilities for auditing third-party dependencies and external libraries for known security risks.
- On-Demand Code Analysis - Enables instant code analysis on specific commits or pull requests using specialized slash commands.
- Static Analysis Engines - Uses AI-driven static analysis to enforce organizational coding conventions and style guides.
- Design System Enforcement - Enforces project-specific brand guidelines and design principles to maintain visual consistency.
