gh-guard
01Plugin Claude Code
CI/CD supply chain hardening for Rust projects — Trusted Publishing, SLSA provenance, Scorecard, cargo-deny, and more.
15 5mo ago A
tokens not measured
original MIT
Instructions file
Instructions for sbom-tool/gh-guard, covering gh-guard: ci/cd supply chain hardening for rust, what this plugin does, hardening levels, commands and skills (contextual knowledge).
15 5mo ago A 1,432 tokens
original MIT
audit
03Command
Scan a Rust project and produce a supply chain security gap analysis.
15 5mo ago A 14 tokens
original MIT
Command
Check for outdated GitHub Action SHAs and CLI tool versions in deployed workflows.
15 5mo ago A 19 tokens
original MIT
generate
05Command
Generate a single supply chain security config file.
15 5mo ago A 10 tokens
original MIT
harden
06Command
Interactive wizard to generate missing supply chain security configs.
15 5mo ago B 12 tokens
original MIT
verify
07Command
Verify that generated supply chain configs are valid and functional.
15 5mo ago A 12 tokens
original MIT
Skill Claude CodeCodex
Cross-platform binary distribution for Rust — cargo-dist, cross, and manual CI matrix.
15 5mo ago B 20 tokens
original MIT
cargo-vet
09Skill Claude CodeCodex
Supply chain audits for third-party crates — human review attestation with cargo-vet.
15 5mo ago A 20 tokens
original MIT
changelog
10Skill Claude CodeCodex
Automated changelog generation with git-cliff and conventional commits.
15 5mo ago A 15 tokens
original MIT
ci-pipeline
11Skill Claude CodeCodex
Rust CI best practices — multi-job design, gate pattern, caching, SHA pinning.
15 5mo ago A 21 tokens
original MIT
Skill Claude CodeCodex
Three-layer dependency defense — cargo-deny, Dependabot, and osv-scanner.
15 5mo ago A 19 tokens
original MIT
fuzz-testing
13Skill Claude CodeCodex
Coverage-guided fuzz testing for Rust — cargo-fuzz, corpus management, and CI integration.
15 5mo ago A 22 tokens
original MIT
Skill Claude CodeCodex
Shared hardening level detection algorithm — single source of truth for /audit, /harden, and migration-guide.
15 5mo ago A 27 tokens
original MIT
Skill Claude CodeCodex
Upgrade paths between hardening levels — detection, delta generation, and rollback.
15 5mo ago B 17 tokens
original MIT
Skill Claude CodeCodex
PR-based release flow with signed tags, branch protection compatibility, and CI polling.
15 5mo ago C 19 tokens
original MIT
Skill Claude CodeCodex
OpenSSF Scorecard — all 18 checks with Rust-specific implementation guidance.
15 5mo ago A 19 tokens
original MIT
Skill Claude CodeCodex
SARIF triage and response for CodeQL, Scorecard, cargo-deny, and Dependabot findings.
15 5mo ago A 25 tokens
original MIT
Skill Claude CodeCodex
SLSA L3 build provenance for Rust crates — three-job publish/provenance/release pipeline.
15 5mo ago A 26 tokens
original MIT
Skill Claude CodeCodex
OIDC-based Trusted Publishing for crates.io — eliminate long-lived API tokens.
15 5mo ago A 18 tokens
original MIT
Skill Claude CodeCodex
Multi-crate workspace publishing — ordering, Trusted Publishing, and release automation.
15 5mo ago A 18 tokens
original MIT