Setup Tag Rulesets

Description

--- description: "Walkthrough: Protect release tags from force-push attacks with GitHub rulesets" allowed-tools: Read, Write, Edit, Glob, Grep, Bash(git:*, gh:*) --- Interactive walkthrough to set up GitHub tag rulesets that prevent force-push and deletion attacks on release tags. This is the mitigation for the TeamPCP attack vector where 110+ tags were hijacked via force-push. Read `${CLAUDE_PLUGIN_ROOT}/skills/supply-chain-hardening/references/actions-configs.md` for context on the TeamPCP a

Installation

Installs to ~/.claude/skills/latiotech-secure-supply-chain-skills-setup-tag-rulesets/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.