Skip to content

docs(cg-actions): recommend install via Chainguard Agent Skills #2

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
tylerpaxton wants to merge 3 commits into from
Closed

docs(cg-actions): recommend install via Chainguard Agent Skills #2

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
4492eb0
docs(cg-actions): recommend installing via Chainguard Agent Skills
tylerpaxton Jun 23, 2026
7b0fdeb
Point Chainguard Agent Skills link at /agent-skills
tylerpaxton Jun 23, 2026
4070245
Reconcile update instructions with chainctl install method
tylerpaxton Jun 23, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
20 changes: 19 additions & 1 deletion skills/cg-actions/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,6 +3,22 @@
A Claude Code skill for auditing GitHub Actions usage and migrating to
[Chainguard hardened actions](https://github.com/chainguard-actions).

## Install

The recommended way to install is the **hardened** build, distributed through
[Chainguard Agent Skills](https://www.chainguard.dev/agent-skills):

```
chainctl skills install skills.cgr.dev/chainguard/chainguard-dev/cg-actions:latest
```

This pulls the skill from the Chainguard registry (`skills.cgr.dev`) — built,
signed, and continuously maintained the same way as Chainguard's other hardened
artifacts. Pin a specific version instead of `:latest` if you want reproducible
installs.

---

**Requires an environment that can run scripts and call the GitHub API** — i.e.
Claude Code (or another agent with a shell tool) plus `gh` authenticated
(`gh auth login`). It does **not** work in a plain claude.ai chat with no shell;
Expand All @@ -12,7 +28,9 @@ the skill checks for this and stops rather than guessing.
the skill runs `scripts/check_version.py`, which compares it to the latest
published in [chainguard-dev/cg-skills](https://github.com/chainguard-dev/cg-skills)
(`skills/cg-actions/VERSION`) and suggests updating if you're behind. To update,
download the latest from <https://github.com/chainguard-dev/cg-skills>.
re-run the install command above — `chainctl skills install
skills.cgr.dev/chainguard/chainguard-dev/cg-actions:latest` pulls the newest
hardened build (or pin a specific version tag for a reproducible install).
Maintainers: bump `VERSION` whenever you change the skill so installs can detect it.

---
Expand Down