Stop merging vulnerable API code — automate PR security gates with Semgrep + Claude AI

Stop merging vulnerable API code — automate PR security gates with Semgrep + Claude AI Every team says "we'll fix it after the merge." They rarely do. I built vorsken — a GitHub Action that blocks pull requests containing API vulnerabilities before they reach your main branch. It combines Semgrep static analysis with Claude AI to post a plain-English verdict directly in the PR comment: BLOCK / FLAG / PASS. Here's how to add it to any repo in under 5 minutes. What it does When a PR is opened or u