Packs that ship
Anthara comes with a set of ready-made packs. They are created when Anthara is installed, so you can use them without writing rules yourself.
The packs
Section titled “The packs”| Pack | Rules | Kind | Use it for |
|---|---|---|---|
| HIPAA Security & Privacy | 13 | Custom | Code that reads, writes, or sends electronic Protected Health Information. |
| PCI DSS 4.0 | 18 | Custom | Code that processes, stores, or sends cardholder data. |
| OWASP Top 10 | 60 | Custom | Code that exposes endpoints, handles user input, or manages sign-in, sessions, and secrets. |
| Clean Code | 26 | Custom | Writing or refactoring functions and classes in any language. |
| Accessibility Checklist | 116 | Custom | Building web interfaces that meet WCAG 2.1 AA. |
| axe-core Violations (WCAG 2.0/2.1/2.2 A/AA) | 104 | Custom | Fixing accessibility violations that an axe-core scanner reported. |
| SonarJS Violations (JavaScript / TypeScript) | 154 | Custom | Keeping JavaScript and TypeScript code free of SonarQube findings. |
| SOC 2 Agent Verification Controls | 54 | Custom | Infrastructure, CI/CD, and control work on systems in a SOC 2 audit scope. |
| Health Tech Compliance | 55 | Org-wide | Health data on patient portals, telehealth, and clinical data services. |
Health Tech Compliance is org-wide, so every repository inherits it from the start. The other packs are Custom, so they do nothing until you apply them.
Use a shipped pack
Section titled “Use a shipped pack”- Open AI Coding Standards and select the Custom tab.
- Open a pack to read its rules.
- Apply the pack to the repositories that need it. See Apply packs to a repository.
Change a shipped pack
Section titled “Change a shipped pack”Shipped packs are ordinary packs. You can add rules, edit rules, delete rules, or turn Apply Org-wide on or off. See Create a pack and add rules.
The packs are seeded again each time Anthara is deployed. The seed matches packs by name:
- Rules you changed, added, or deleted stay as you left them. The seed never touches the rules of a pack that already exists.
- The description and tags are reset to the shipped version when they differ.
- A shipped pack that you deleted or renamed is created again with its original rules.
Packs that are not included
Section titled “Packs that are not included”The Anthara website lists packs for FDA SaMD, ISO 27001, GLBA, and FedRAMP. The current product does not ship packs with those names. You can cover them by creating your own packs.