latiotech

Setup Tag Rulesets — Git skill for Claude Code

Git community

Walkthrough: Protect release tags from force-push attacks with GitHub rulesets.

How to install Setup Tag Rulesets

Installs to ~/.claude/skills/latiotech-secure-supply-chain-skills-setup-tag-rulesets/SKILL.md

Terminal
mkdir -p ~/.claude/skills/latiotech-secure-supply-chain-skills-setup-tag-rulesets && curl -fsSL https://raw.githubusercontent.com/latiotech/secure-supply-chain-skills/HEAD/commands/setup-tag-rulesets.md -o ~/.claude/skills/latiotech-secure-supply-chain-skills-setup-tag-rulesets/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What Setup Tag Rulesets does

description: "Walkthrough: Protect release tags from force-push attacks with GitHub rulesets" allowed-tools: Read, Write, Edit, Glob, Grep, Bash(git:*, gh:*)

Interactive walkthrough to set up GitHub tag rulesets that prevent force-push and deletion attacks on release tags. This is the mitigation for the TeamPCP attack vector where 110+ tags were hijacked via force-push.

Read `${CLAUDE_PLUGIN_ROOT}/skills/supply-chain-hardening/references/actions-configs.md` for context on the TeamPCP a

Alternatives in Git

Full documentation available on GitHub

View Source Repository

Related Skills

Setup Commit Signing — Git skill for Claude Code

Setup Commit Signing

Walkthrough: Set up commit and tag signing with GPG, SSH, or Sigstore gitsign

Git community
Release Tag — Git skill for Claude Code

Release Tag

tag and push a release after the release PR is merged

Git community
Claude Code Multimodel Workflow — Git skill for Claude Code

Claude Code Multimodel Workflow

v2: server-enforced merge gates for repos shared by humans and coding agents — merge-gate suite attestation, b

Git community
Eagle Tag Governance — Git skill for Claude Code

Eagle Tag Governance

Agent Skills-compatible skill to govern an Eagle library's tag vocabulary via eagle-mcp — merge, rename, norma

Git community
Thumbgate Protect — Git skill for Claude Code

Thumbgate Protect

Show this repo's branch/release governance and grant a scoped, time-limited approval for an action that touche

Git community
Branch Cleanup — Git skill for Claude Code

Branch Cleanup

Clean up merged, stale, and orphaned git branches. Protects main/develop/release/ automatically. Supports --dr

Git community

Related Agents

Gitter — Development agent for Claude Code

Gitter

The only agent that writes git — every other agent is read-only. Delegate each worktree setup, commit, merge,

Development community
Git Release Tagger — Development agent for Claude Code

Git Release Tagger

Use this agent when you need to create a git tag for a version of the app. Supports both post-release tags (Ap

Development community
Security Architecture — Security agent for Claude Code

Security Architecture

Boucle implements a defense-in-depth security model to protect against prompt injection attacks and maintain t

Security community