claude-plugins-official

mirror of https://github.com/anthropics/claude-plugins-official.git synced 2026-06-13 22:26:03 -03:00

History

ci: migrate scan-plugins.yml to Workload Identity Federation auth (#1991 )

* ci: migrate scan-plugins.yml to Workload Identity Federation auth

Replaces the static ANTHROPIC_API_KEY repo secret with Workload
Identity Federation: the scan-plugins shared action mints a GitHub
OIDC token (id-token: write) and the claude CLI exchanges it for a
short-lived bearer. The federation rule is bound to this repository
(repository_id-pinned).

Depends on anthropics/claude-plugins-community#34 (adds the WIF
inputs to the shared action). Pinned to that PR's head SHA; will
re-pin to a main-branch SHA once #34 merges.

Drops the 'Require ANTHROPIC_API_KEY' fail-closed guard — the WIF
inputs are literal in this file, so the action's skip-if-no-auth
path can't trigger. Updates the prompt-injection security comment
to reflect the short-lived bearer model.

* scan-plugins: re-pin to cpc#34 merge commit on main

claude-plugins-community#34 merged at e85f0d65b4fc87f07862e1dcdc467950514414ec — re-pinning from
the PR head SHA to the squash-merge commit on main so the pin survives
any future branch GC.

2026-05-24 14:48:46 -07:00

bump-plugin-shas.yml

Raise bump cap with verdict cache and skip-and-revert (#1913 )

2026-05-18 20:55:20 +01:00

check-mcp-urls.yml

Fix MCP URL probe: connection failure was reported as PASS (#1922 )

2026-05-22 09:57:14 -05:00

close-external-prs.yml

Update webhook closed PR message link to clau.de (#500 )

2026-03-03 17:08:52 -08:00

revert-failed-bumps.yml

Raise bump cap with verdict cache and skip-and-revert (#1913 )