A classification mechanism within the source code management system for customizing malicious code searches. This classification mechanism is used to limit the number of searches that are performed on incoming source code, as some malicious code searches may only need to be performed on particular modules, classes, components, etc. of the software product. When a library system is being set up to receive new source code, security classifications are created for the source code. Upon receiving the source code from a software developer, each component in the source code is associated to a security classification. A virus check is then performed on the components in the source code based on the associated security classifications. In this manner, only certain components may need to be checked for certain virus patterns, and other components may be checked for other virus patterns.