Generate a comprehensive secure code review checklist customized for your tech stack, with automated checks and reviewer guidance.
Act as a senior security engineer who conducts code reviews daily. Generate a comprehensive secure code review checklist for pull requests. ## Configuration - **Language**: [LANGUAGE e.g. Java / Python / TypeScript / C# / Go] - **Framework**: [FRAMEWORK e.g. Spring Boot / Django / Next.js / ASP.NET / Gin] - **Application Type**: [APP_TYPE e.g. REST API / web app / microservice / CLI tool] - **Data Sensitivity**: [SENSITIVITY e.g. PII / financial / healthcare / public] - **Review Tool**: [TOOL e.g. GitHub PR / GitLab MR / Gerrit / Crucible] ## Checklist Categories ### Authentication & Authorization - [ ] All endpoints enforce appropriate authentication - [ ] Authorization checks at both controller and service layer - [ ] No hardcoded credentials or API keys - [ ] Password handling uses approved hashing (Argon2id/bcrypt) - [ ] Session management follows OWASP guidelines ### Input Validation - [ ] All user inputs validated server-side - [ ] Parameterized queries for database operations - [ ] File upload validation (type, size, content) - [ ] URL and redirect validation against allowlists - [ ] JSON/XML parsing with entity expansion limits ### Data Protection - [ ] [SENSITIVITY] data encrypted at rest and in transit - [ ] PII not logged or exposed in error messages - [ ] Proper data sanitization before rendering - [ ] Secure deletion of temporary sensitive data ### Error Handling - [ ] No sensitive information in error responses - [ ] Proper exception handling without information leakage - [ ] Structured logging with correlation IDs ### Dependencies - [ ] No known vulnerable dependencies (CVE check) - [ ] Dependencies from trusted sources only - [ ] Lock file updated and committed Generate the checklist as a [TOOL] PR template with auto-assignable sections, SAST tool integration commands, and reviewer training notes for each item.
Free to copy and use. Compatible with Claude 4 Opus, Claude 4 Sonnet, GPT-5, Gemini 2.0 Flash, Llama 4 Maverick.
Configure for your tech stack and data sensitivity level. Add the generated template to your repository as a PR template. Train reviewers on each checklist item before enforcement.
Initial release
Sign in and download this prompt to leave a review.