Directory / Claude community plugins (Anthropic) / gh-guard

gh-guard

GH-Guard hardens CI/CD pipelines for Rust projects. It generates production-tested GitHub Actions workflows with SHA-pinned actions, OIDC-based Trusted Publishing, SLSA L3 provenance, and layered dependency auditing via cargo-deny, Dependabot, and osv-scanner. Five commands: /audit scans your repo against supply chain best practices, /harden walks you through fixes at three levels (Minimal/Standard/Hardened), /generate creates individual config files, /check-updates catches stale SHA pins, and /verify validates everything before you push. 14 skills provide deep context on Scorecard checks, dangerous workflow patterns, release automation, workspace publishing, fuzz testing, and compromised action incident response. All guidance is informed by real-world incidents including the March 2026 Trivy tag hijacking.
Description from the marketplace entry / plugin manifest.

Information source

Copied from the Claude community plugins (Anthropic) catalog (anthropics/claude-plugins-community), maintained by Anthropic (community submissions).

Marketplace entry: .claude-plugin/marketplace.json

Links are pinned to commit 06ec7b6 (2026-10-13), the version we synced. Not reviewed by us.

Install

Add the marketplace (once, in Claude Code)

/plugin marketplace add anthropics/claude-plugins-community

In a Claude Code session

/plugin install gh-guard@claude-community

From your shell

claude plugin install gh-guard@claude-community

Commands follow each host's documentation (Claude Code, Claude Cowork docs). gh skill needs GitHub CLI 2.90 or later and is in public preview.

Listed from Anthropic (community submissions)'s catalog, not reviewed by us. Read the source before installing.

Catalog: Claude community plugins (Anthropic) (claude-community)
Information source: marketplace.json in anthropics/claude-plugins-community
Author: Not stated in the source
Source code: sbom-tool/gh-guard
Homepage: github.com/sbom-tool/gh-guard
License: MIT (repository license)
Repository stars: 15 for sbom-tool/gh-guard
Added to catalog: 2026-03-24
Last change: 2026-03-22 (last push to the repo)

What it contains

Hosted in an external repository, so contents are not counted here. See the source link.

Similar in Deployment, cloud & DevOps

mem0 (Claude community plugin)
browser-harness (Claude community plugin)
deeplake-hivemind (Claude community plugin)
azure (Claude community plugin)
open-ontologies (Claude community plugin)
praxis-engineering (Claude community plugin)