GitHub Release
Safe, automated GitHub releases with supply chain security. Prevents dangerous gh release commands, orchestrates version bumps, signed tags, and CI-driven releases across ecosystems.
Install
Pick whichever fits your project — they all reach the same skill.
-
Claude Code via this marketplace /plugin install github-release@netresearch-claude-code-marketplace -
npx any Agent Skills CLI npx skills add https://github.com/netresearch/github-release-skill --skill github-releaseUniversal Agent Skills CLI from
skills.sh— works across Claude Code, Cursor, GitHub Copilot, Codex, Gemini CLI and 30+ more agents. -
composer require PHP project, as a package composer require netresearch/github-release-skillRequires
netresearch/composer-agent-skill-plugin— resolves Agent Skills as Composer dependencies in PHP projects, auto-discovers skills, generates AGENTS.md. -
composer skills:add PHP project, direct source composer skills:add github:netresearch/github-release-skillProvided by
netresearch/composer-agent-skill-plugin— pins skill repos directly without going through Packagist, locks them incomposer.skills.lock.
What you can do with it
- Guard hooks: Block gh release create/delete/edit and lightweight tag creation at the tool level
- Ecosystem detection: Auto-detect project type (TYPO3, PHP, Node.js, Go, Python, Rust, skill repos)
- Version management: Suggest next semver version from conventional commits, update all version files
- Release orchestration: Version bump PR → merge → signed tag → CI handles the rest
- Health checks: Validate release workflow, tag integrity, supply chain security
- CI templates: Release workflow templates with SBOM, cosign, attestation support
What it expects in your project
- Installed automatically via the Netresearch marketplace.