github-release
v1.5.0by netresearch · author: Netresearch DTT GmbH
Safe, automated GitHub releases with supply chain security. Prevents dangerous gh release commands, orchestrates version bumps, signed tags, and CI-driven releases across ecosystems (TYPO3, PHP, Node.js, Go, Python, Rust, skill repos).
What github-release does, in the publisher's words
Claude Code skill plugin for safe, automated GitHub releases with supply chain security.
AI coding agents (Claude Code, Copilot, etc.) naturally reach for gh release create when asked to "create a release". This:
- Creates lightweight unsigned tags instead of signed annotated tags
- Creates immutable releases that permanently burn tag names (no recovery)
- Bypasses CI pipelines that handle SBOMs, attestations, and signing
This skill prevents these mistakes structurally via hooks and provides the correct release orchestration.
- Guard hooks: Block gh release create/delete/edit and lightweight tag creation at the tool level
- Ecosystem detection: Auto-detect project type (TYPO3, PHP, Node.js, Go, Python, Rust, skill repos)
- Version management: Suggest next semver version from conventional commits, update all version files
From the project README, punctuation lightly normalized · Open the README on GitHub
- Skills
- 1
- MCP servers
- 0
- Stars
- 3
- License
- (MIT AND CC-BY-SA-4.0)
- Repo created
- 2026-04-10
- Last pushed
- 2026-11-06
- Publisher type
- Organization
- Version
- 1.5.0
Links
Skills · 1
- github-release
- Use when creating releases, version bumps, tagging, release health checks, or when user says 'release', 'tag', 'version bump'. Also activates on gh release commands to BLOCK them and redirect to safe process.
Descriptions come from the frontmatter of each SKILL.md, punctuation lightly normalized.
Category
DevOps & Cloud. Assigned by this directory. Agent Plugins 1.0.0 has no category field, so no manifest declares one.
Related by publisher and keywords
Comprehensive Jira integration with auto-detection of issue keys
Generate and maintain AGENTS.md, copilot-instructions.md, and other agent rule files
Fetch up-to-date library documentation via Context7 REST API
PHP 8.x modernization patterns with type safety and PHPStan
Git workflow best practices with commit validation hooks
Security audit patterns (OWASP Top 10, CWE Top 25 2025, CVSS v4.0) and GitHub project security checks for any project. Deep automated PHP/TYPO3 scanning with 80+ checkpoints, 41 reference guides, PreToolUse warnings. By Netresearch.
[](https://agentpluginsdirectory.com/plugins/github-release)✓ Verified . We fetched the manifest from GitHub and checked it against the official Agent Plugins 1.0.0 schema at agent-plugins.org.