CodexPluginStats
← Claude plugins
CLAUDE PLUGIN

gh-guard

Developer not provided v0.2.1

GH-Guard hardens CI/CD pipelines for Rust projects. It generates production-tested GitHub Actions workflows with SHA-pinned actions, OIDC-based Trusted Publishing, SLSA L3 provenance, and layered d...

Create a free account to save this plugin.

From the developer

License

MIT

Works with

Claude Code

Description

From the marketplace listing

GH-Guard hardens CI/CD pipelines for Rust projects. It generates production-tested GitHub Actions workflows with SHA-pinned actions, OIDC-based Trusted Publishing, SLSA L3 provenance, and layered dependency auditing via cargo-deny, Dependabot, and osv-scanner. Five commands: /audit scans your repo against supply chain best practices, /harden walks you through fixes at three levels (Minimal/Standard/Hardened), /generate creates individual config files, /check-updates catches stale SHA pins, and /verify validates everything before you push. 14 skills provide deep context on Scorecard checks, dangerous workflow patterns, release automation, workspace publishing, fuzz testing, and compromised action incident response. All guidance is informed by real-world incidents including the March 2026 Trivy tag hijacking.

Source repository ↗ Website ↗

What changed

No changes recorded yet. Follow this plugin to keep track of future changes.

Keywords

Files & skills

gh-guard · catalog manifest

Saved declaration

{}
gh-guard · catalog manifest

Saved declaration

{
  "name": "gh-guard",
  "source": {
    "sha": "ab077c1f986287f755595fb94ba108e143dc7e66",
    "url": "https://github.com/sbom-tool/gh-guard.git",
    "source": "url"
  },
  "homepage": "https://github.com/sbom-tool/gh-guard",
  "description": "GH-Guard hardens CI/CD pipelines for Rust projects. It generates production-tested GitHub Actions workflows with SHA-pinned actions, OIDC-based Trusted Publishing, SLSA L3 provenance, and layered dependency auditing via cargo-deny, Dependabot, and osv-scanner.\n\nFive commands: /audit scans your repo against supply chain best practices, /harden walks you through fixes at three levels (Minimal/Standard/Hardened), /generate creates individual config files, /check-updates catches stale SHA pins, and /verify validates everything before you push.\n\n14 skills provide deep context on Scorecard checks, dangerous workflow patterns, release automation, workspace publishing, fuzz testing, and compromised action incident response. All guidance is informed by real-world incidents including the March 2026 Trivy tag hijacking."
}
gh-guard · catalog manifest

Saved declaration

{
  "name": "gh-guard",
  "license": "MIT",
  "version": "0.2.1",
  "keywords": [
    "rust",
    "supply-chain",
    "security",
    "ci-cd",
    "slsa",
    "scorecard",
    "trusted-publishing",
    "cargo-deny",
    "openssf",
    "provenance"
  ],
  "repository": "https://github.com/sbom-tool/gh-guard",
  "description": "CI/CD supply chain hardening for Rust projects — Trusted Publishing, SLSA provenance, Scorecard, cargo-deny, and more"
}

plugin.json observed Nov 6, 2026 · 10:44 UTC. Manifest source ↗

Catalog declarations and available plugin.json metadata are saved. Referenced skills and executable source files are not downloaded or tested. Missing components in a manifest do not prove that the plugin has none.

Installation instructions

Community

/plugin marketplace add anthropics/claude-plugins-community
/plugin install gh-guard@claude-community

Claude Code installation documentation

Technical details
Sources
Community
First seen
Oct 3, 2026 · 22:13 UTC
Last seen
Nov 7, 2026 · 06:00 UTC
Latest observed change
Oct 3, 2026 · 22:13 UTC
Collection status
Listed
Reported installs
Not provided

Installation counts are source-reported, not independently verified active users. Observation dates are not release dates.

Download plugin data (JSON)

Plugin history: served from cache. Prepared . Refreshed when catalog data changes or after 6 hours. Your account and Follow status are live.