If you are just now evaluating a software factory you are way the f*ck behind.
This should be your top priority.
At a minimum, every night run the Claude security plugin and @vercel’s deepsec on a dedicated machine with a dedicated user (not root) using the latest frontier model and also create a cascading “ladder” of models with the most advanced at the top of the ladder. This should be a launchd or cron task.
In addition, you need a realtime bot listening for / tracking all CVEs and it immediately provides patches and/or notifies you of a pull request for the patch and any operator actions (think DevOps). @grok @bot is the best at this because the CVEs propagate on X.
Then you can add, more nightly runners for performance, testing, documentation, feature drift, etc.
But security should be at an absolute minimum.
What are your best practices?
This should be your top priority.
At a minimum, every night run the Claude security plugin and @vercel’s deepsec on a dedicated machine with a dedicated user (not root) using the latest frontier model and also create a cascading “ladder” of models with the most advanced at the top of the ladder. This should be a launchd or cron task.
In addition, you need a realtime bot listening for / tracking all CVEs and it immediately provides patches and/or notifies you of a pull request for the patch and any operator actions (think DevOps). @grok @bot is the best at this because the CVEs propagate on X.
Then you can add, more nightly runners for performance, testing, documentation, feature drift, etc.
But security should be at an absolute minimum.
What are your best practices?