Helmsniff is a Go CLI that scans rendered Kubernetes and Helm manifests and generates CSV or JSON reports of security misconfigurations. It flags issues like missing securityContexts, insecure HTTP URLs, hostNetwork usage, privileged containers and Docker socket mounts, and supports directory or stdin input, parallel execution, and standard Makefile targets.

• Helmsniff scans rendered K8s/Helm YAML and outputs a CSV or JSON report flagging misconfigurations like privileged containers, missing resource limits, hostNetwork usage, and Docker socket mounts.
• It accepts input from a directory or stdin, letting you pipe `helm template` output directly in without temp files, and supports parallel scanning of multiple charts via GNU parallel.
• Each report row includes chart path and file path context, with checks marked 1 (violation) or 0 (safe), plus K8S_STATUS/HELM_STATUS boolean fields.
• Built in Go (requires 1.22+ and GNU Make), with a clean codebase split into cmd/main.go, config, parser, and scanner modules, backed by tests and an ARCHITECTURE.md documenting each check.

The entire source code for Anthropic’s Claude Code CLI has leaked due to an internal error during a package release. This includes nearly 2,000 TypeScript files and over 512,000 lines of code, exposing the application’s inner workings to competitors and developers. Anthropic has acknowledged the mistake and stated it was not a security breach.

• A packaging error in Claude Code v2.1.88 exposed a source map, leaking the entire ~2,000-file, 512,000+ line TypeScript codebase.
• The leaked code was quickly archived and uploaded to GitHub, gaining tens of thousands of forks within a short time.
• Anthropic says no customer data was exposed and calls it human error, not a security breach, while adding safeguards.
• Developers have already begun reverse-engineering internals, like Claude Code's memory architecture and background memory rewriting system.