Claude Code Security Setup

Trail of Bits Setup Security


Opinionated defaults, documentation, and workflows for Claude Code in a safer, more structured environment inspired by Trail of Bits practices.

This repository combines two related pieces in one clean place:

• claude-code-devcontainer
• claude-code-config

The goal is to give you:

• a reusable devcontainer workflow for isolated Claude sessions
• a reusable Claude config package for settings, hooks, commands, and memory
• a documented setup path that is easier to follow than an ad hoc local setup

Also see the package-level guides:

• claude-code-devcontainer/README.md
• claude-code-config/README.md
• docs/setup-guide.md

First-Time Setup

Start inside this repository:

cd trailofbits-setup-security

Then follow this order:

# 1. Install the Dev Containers CLI
npm install -g @devcontainers/cli

# 2. Install the devc helper from this repo
cd claude-code-devcontainer
./install.sh self-install

# 3. Optionally install Claude config files
cd ..
mkdir -p ~/.claude ~/.claude/commands
cp claude-code-config/settings.json ~/.claude/settings.json
cp claude-code-config/claude-md-template.md ~/.claude/CLAUDE.md
cp claude-code-config/scripts/statusline.sh ~/.claude/statusline.sh
chmod +x ~/.claude/statusline.sh
cp claude-code-config/commands/review-pr.md ~/.claude/commands/
cp claude-code-config/commands/fix-issue.md ~/.claude/commands/
cp claude-code-config/commands/merge-dependabot.md ~/.claude/commands/
cp claude-code-config/mcp-template.json ~/.mcp.json

Then move to the project you want to run in a container:

cd /path/to/your/project
devc .
devc shell
claude

If `.devcontainer/` already exists in the target project, use `devc up` instead of `devc .`.

Contents

**Getting Started**

• Read These First
• Repository Purpose
• Prerequisites
• Recommended Tools
• Shell Setup
• Installing