---
title: "github-release"
description: "Safe, automated GitHub releases with supply chain security. Prevents dangerous gh release commands, orchestrates version bumps, signed tags, and CI-driven releases across ecosystems (TYPO3, PHP, Node.js, Go, Python, Rust"
canonical: https://agentpluginsdirectory.com/plugins/github-release
last-updated: 2026-09-22
---

# github-release
Safe, automated GitHub releases with supply chain security. Prevents dangerous gh release commands, orchestrates version bumps, signed tags, and CI-driven releases across ecosystems (TYPO3, PHP, Node.js, Go, Python, Rust, skill repos).
- Slug: github-release
- Publisher: Netresearch DTT GmbH
- Repository: https://github.com/netresearch/github-release-skill
- Manifest: plugin.json
- Version: 1.0.4
- License: (MIT AND CC-BY-SA-4.0)
- Category (editorial): devops-cloud
- Skills: 1 (github-release)
- MCP servers: 0
- Stars: 3
- Repository created: 2026-04-10
- Repository last pushed: 2026-09-22
- Publisher type: Organization
- Listing: https://agentpluginsdirectory.com/plugins/github-release
- Schema: https://agent-plugins.org/schemas/1.0.0/plugin.schema.json

## What github-release does, in the publisher's words

Claude Code skill plugin for safe, automated GitHub releases with supply chain security.

AI coding agents (Claude Code, Copilot, etc.) naturally reach for gh release create when asked to "create a release". This:

- Creates lightweight unsigned tags instead of signed annotated tags
- Creates immutable releases that permanently burn tag names (no recovery)
- Bypasses CI pipelines that handle SBOMs, attestations, and signing

This skill prevents these mistakes structurally via hooks and provides the correct release orchestration.

- Guard hooks: Block gh release create/delete/edit and lightweight tag creation at the tool level
- Ecosystem detection: Auto-detect project type (TYPO3, PHP, Node.js, Go, Python, Rust, skill repos)
- Version management: Suggest next semver version from conventional commits, update all version files

From the project README, punctuation lightly normalized. Full text: https://raw.githubusercontent.com/netresearch/github-release-skill/HEAD/README.md

## Skills

- github-release: Use when creating releases, version bumps, tagging, release health checks, or when user says 'release', 'tag', 'version bump'. Also activates on gh release commands to BLOCK them and redirect to safe process.

Descriptions come from the frontmatter of each SKILL.md, punctuation lightly normalized.