If Claude Code is the new us-east-1 (I think it is), your coding agents should know about php2shell before your cloud scanner.
@Semgrep’s Guardian plugin for Claude Code, Codex & more now deterministically flags vulnerable PHP versions. Nice work team!