claude

compliance

Security compliance and vulnerability analysis tools for Go projects

122 on GitHubby chiragkyalv0.4.1Apache-2.0updated todaysecurity
/

Plugin compliance from marketplace ai-helpers in openshift-eng/ai-helpers. Commands read from the repo's manifest — today.

What it installs

Skills (9)

  • analyze-cve

    Full Go CVE analysis workflow. Given a CVE identifier -- supplied directly, or resolved from a Jira ticket or JQL batch -- resolves and clones the affected repository, gathers vulnerability intelligence, analyzes codebase impact with govulncheck and call-graph reachability, generates a risk report,

  • call-graph-analysis

    Perform definitive call graph analysis to prove whether vulnerable functions are reachable from program entry points

  • codebase-impact-analysis

    Analyze a Go codebase to determine if it is impacted by a specific CVE using multiple verification methods and assign a risk level

  • create-fix-pr

    Use when opening or updating a GitHub pull request after Phase 5 of `/compliance:analyze-cve` has applied and verified a CVE fix locally.

  • cve-intelligence-gathering

    Gather comprehensive vulnerability information from multiple authoritative sources with fallback strategies

  • image-repo-mapping

    Use when resolving which GitHub repository to clone for CVE analysis from a container image name in a Jira ticket summary, pscomponent label, or Downstream Component Name field.

  • jira-cve-extraction

    Use when `/compliance:analyze-cve` is invoked with `--jira=` or `--jql=` and needs the CVE ID, image name, branch, and enriched ticket context from a Jira issue.

  • remediation-planning

    Generate comprehensive remediation guidance including dependency updates, code changes, workarounds, and verification steps

  • report-to-jira

    Use when posting a completed CVE analysis report or PR follow-up as a Jira comment on the source ticket from `/compliance:analyze-cve`.

View source on GitHub openshift-eng.github.io

More from openshift-eng/ai-helpers

All 45 plugins →

prodsec-skills

claude

Security guidance skills for AI coding assistants

145 skills

122

ci

claude

A plugin to work with OpenShift CI and analyze Prow job results

36 skills · 20 commands · 2 agents · 1 MCP server

122

patternfly

claude

PatternFly development tools from the UXD team — component scaffolding, design guidance, auditing, migration, test generation, and an MCP server.

55 skills

122

jira

claude

A plugin to automate tasks with Jira

13 skills · 17 commands · 1 MCP server

122

teams

claude

Team structure knowledge and health analysis commands for OpenShift teams

13 skills · 10 commands

122

openshift

claude

OpenShift development utilities and helpers

2 skills · 17 commands

122

Similar plugins

ecc

claudecodex

Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses

200 skills · 98 commands · 71 agents · 1 MCP server · hooks

affaan-m/ECC 302,088

security-guidance

claude

Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.

hooks

anthropics/claude-code 155,476

ruflo-adr

claudecodex

ADR lifecycle management — create, index, supersede, and link Architecture Decision Records to code

5 skills · 1 command · 1 agent

ruvnet/ruflo 81,589

duende-skills

claudecodex

Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture

24 skills · 2 agents

anthropics/claude-plugins-official 47,076

security-scanning

claudecodex

SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening

5 skills · 3 commands · 2 agents

wshobson/agents 42,461

Maintain compliance?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins45 plugins