Contact
DevOps & Infrastructure

GitHub Release

Safe, automated GitHub releases with supply chain security. Prevents dangerous gh release commands, orchestrates version bumps, signed tags, and CI-driven releases across ecosystems.

Latest release v1.5.1

Install

Choose a supported route below. Package contents, agent registration and runtime dependencies can differ between installers.

  1. Claude Code via this marketplace 
    /plugin install github-release@netresearch-claude-code-marketplace

    First add the marketplace once in Claude Code: /plugin marketplace add netresearch/claude-code-marketplace. Then install the selected plugin. For setup and installation scopes, see Claude Code plugin setup A plugin can include several skills and additional components.

  2. npx interactive skill selection 
    npx skills add https://github.com/netresearch/github-release-skill

    Requires Node.js 22.20+. Run from the target project, then choose the source skills and agents in the installer. Uses the skills CLI from skills.sh Installs skill instructions. Extra plugin hooks, commands and external runtime tools are not installed by this route.

  3. composer require PHP project, as a package 
    composer require netresearch/github-release-skill

    Allow the Composer skill installer to activate and approve skill registration when prompted. Requires netresearch/composer-agent-skill-plugin Discovers trusted skill packages and registers their instructions in AGENTS.md. Runtime tools may need separate setup.

  4. composer skills:add PHP project, direct source 
    composer skills:add netresearch/github-release-skill

    Install and activate netresearch/composer-agent-skill-plugin first; approve the selected source's skill registration. Provided by netresearch/composer-agent-skill-plugin Pins source repositories without a Packagist package and records them in composer.skills.lock. Runtime dependencies remain separate.

What you can do with it

  • Guard hooks: Block gh release delete, gh release edit beyond notes, a gh release create that could create the tag (i.e. without --verify-tag), and lightweight tag creation — at the tool level
  • Ecosystem detection: Auto-detect project type (TYPO3, PHP, Node.js, Go, Python, Rust, skill repos)
  • Version management: Suggest next semver version from conventional commits, update all version files
  • Release orchestration: Version bump PR → merge → signed tag → CI handles the rest
  • Health checks: Validate release workflow, tag integrity, supply chain security
  • CI templates: Release workflow templates with SBOM, cosign, attestation support

What you get back

  • A version-bump pull request or a coordinated signed-tag and CI release, with release health-check results for the chosen command.

What it expects in your project

Check the source README for current examples, requirements and limitations. Open full README

Tags

  • devops
  • github