Claude MarketplacesSubmit
uw-ssec avatar

supply-chain-security

uw-ssec/rse-plugins

Supply-chain security plugin for research software. 2 agents (lead expert + incident responder), 5 commands (audit, incident, lockfile-check, pin-actions, harden-workflow), 6 skills covering hardened CI/CD, dependency security, threat awareness, SBOM/provenance, incident response, and ecosystem-specific quirks (npm, PyPI, conda/pixi, cargo, Go). Covers 2025-2026 campaigns: Shai-Hulud, TeamPCP, axios, LiteLLM .pth persistence.

version
0.2.0
GitHub stars
32
View on GitHubHomepage

Install

/plugin install supply-chain-security@rse-plugins

Run it inside Claude Code after adding the marketplace with /plugin marketplace add uw-ssec/rse-plugins.

Sponsors

Promote your product hereReach 125k+ visitors monthlyPromote your product hereReach 125k+ visitors monthlyAgent CaffeineSponsoredClose your lid, come back to finished workSnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthlyWaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthlyknobsSponsoredSee your site on any phone, any day, in any language

Details

Marketplace
uw-ssec/rse-plugins
Source
plugins/supply-chain-security
Author
SSEC Engineering Team
Category
Security
License
BSD-3-Clause
Keywords
supply-chain-security, github-actions, sha-pinning, oidc, trusted-publishing, lockfile, sbom, cyclonedx, spdx, sigstore, cosign, slsa, provenance, dependency-security, threat-awareness, incident-response, pwn-request, harden-runner, npm, pypi, conda, pixi, cargo, go, research-software

More from uw-ssec/rse-plugins

All 12