claude-plugins-official

mirror of https://github.com/anthropics/claude-plugins-official.git synced 2026-07-14 05:06:51 -03:00

History

ci: migrate scan-plugins.yml to Workload Identity Federation auth

Replaces the static ANTHROPIC_API_KEY repo secret with Workload
Identity Federation: the scan-plugins shared action mints a GitHub
OIDC token (id-token: write) and the claude CLI exchanges it for a
short-lived bearer. The federation rule is bound to this repository
(repository_id-pinned).

Depends on anthropics/claude-plugins-community#34 (adds the WIF
inputs to the shared action). Pinned to that PR's head SHA; will
re-pin to a main-branch SHA once #34 merges.

Drops the 'Require ANTHROPIC_API_KEY' fail-closed guard — the WIF
inputs are literal in this file, so the action's skip-if-no-auth
path can't trigger. Updates the prompt-injection security comment
to reflect the short-lived bearer model.

2026-05-23 08:49:26 +00:00

bump-plugin-shas.yml

Raise bump cap with verdict cache and skip-and-revert (#1913 )

2026-05-18 20:55:20 +01:00

check-mcp-urls.yml

Fix MCP URL probe: connection failure was reported as PASS (#1922 )

2026-05-22 09:57:14 -05:00

close-external-prs.yml

Update webhook closed PR message link to clau.de (#500 )

2026-03-03 17:08:52 -08:00

revert-failed-bumps.yml

Raise bump cap with verdict cache and skip-and-revert (#1913 )