My CLI security scanner (compatible with Claude Code) found 407 vulnerabilities in production code