Stats
Actions
Tags
Help us improve
Share bugs, ideas, or general feedback.
From jeremy-github-actions-gcp
Validates GitHub Actions workflows for secure Google Cloud and Vertex AI deployments using Workload Identity Federation, OIDC, least-privilege IAM, and security scans.
npx claudepluginhub jeremylongshore/claude-code-plugins-plus-skills --plugin jeremy-github-actions-gcpHow this skill is triggered — by the user, by Claude, or both
Slash command
/jeremy-github-actions-gcp:gh-actions-validatorThis skill is limited to the following tools:
The summary Claude sees in its skill listing — used to decide when to auto-load this skill
Validate and harden GitHub Actions workflows that deploy to Google Cloud (especially Vertex AI) using Workload Identity Federation (OIDC) instead of long-lived service account keys. Use this to audit existing workflows, propose a secure replacement, and add CI checks that prevent common credential and permission mistakes.
Reviews GitHub Actions workflows for supply chain risks: enforces SHA pinning, rates third-party actions, scopes permissions, checks triggers and inputs, and recommends updates.
Design, debug, and harden GitHub Actions CI/CD workflows including reusable workflows, matrix builds, self-hosted runners, OIDC authentication, caching, environments, secrets, and release automation.
Hardens GitHub Actions workflows against supply chain attacks, credential theft, and script injection using SHA pinning, minimal token permissions, and secure expression parsing.
Share bugs, ideas, or general feedback.
Validate and harden GitHub Actions workflows that deploy to Google Cloud (especially Vertex AI) using Workload Identity Federation (OIDC) instead of long-lived service account keys. Use this to audit existing workflows, propose a secure replacement, and add CI checks that prevent common credential and permission mistakes.
Before using this skill, ensure:
- uses: actions/checkout@v4
- name: Authenticate to GCP (WIF)
- name: Deploy to Vertex AI
--project=${{ secrets.GCP_PROJECT_ID }} \
--region=us-central1
- name: Validate Deployment
See ${CLAUDE_SKILL_DIR}/references/errors.md for comprehensive error handling.
See ${CLAUDE_SKILL_DIR}/references/examples.md for detailed examples.