gh-guard
sbom-tool/gh-guardPlugin
GH-Guard hardens CI/CD pipelines for Rust projects. It generates production-tested GitHub Actions workflows with SHA-pinned actions, OIDC-based Trusted Publishing, SLSA L3 provenance, and layered dependency auditing via cargo-deny, Dependabot, and osv-scanner. Five commands: /audit scans your repo against supply chain best practices, /harden walks you through fixes at three levels (Minimal/Standard/Hardened), /generate creates individual config files, /check-updates catches stale SHA pins, and /verify validates everything before you push. 14 skills provide deep context on Scorecard checks, dangerous workflow patterns, release automation, workspace publishing, fuzz testing, and compromised action incident response. All guidance is informed by real-world incidents including the March 2026 Trivy tag hijacking.
Why this score
Popularity score: 40/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank
Security
Scanned Nov 4, 2026 at commit ab077c1f9862, with Cisco's open-source skill-scanner.
What its code does:
- Runs shell commands Common for dev tools. Read the commands it runs.templates/release.sh:197 and 1 more
A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan
Prompts that use GitHub
Alternatives
Other makers' add-ons that do the same job, next to this one.
| Name | Score | Stars | Context | Updated |
|---|---|---|---|---|
| This onegh-guard sbom-tool/gh-guard · Plugin | 40 | ★ 15 | not measured | 8mo ago |
| cli-gh PaulRBerg/agent-skills · Skill Also for GitHub | 58 | ★ 101 | ≈30 always | 16d ago |
| gh bubbuild/bub · Skill Also for GitHub | 73 | ★ 1.7k | ≈97 always | 16d ago |
| gh-issues Kilo-Org/kilocode · Skill Also for GitHub | 85 | ★ 28k | ≈56 always | 16d ago |
| gh-stack CherryHQ/cherry-studio · Skill Also for GitHub | 88 | ★ 53k | ≈52 always | 16d ago |
| gh-action live-codes/livecodes · Skill Both about gh and action | 71 | ★ 1.5k | ≈23 always | 16d ago |