Skip to content

Commit 4e947a1

Browse files
committed
feat(security): add security plugin for container vulnerability analysis
Add security plugin that integrates with container-grade-reporter tool to provide vulnerability grade assessment for Red Hat container images. Features: - /security:image-grades: Generate CVE vulnerability grade reports - /security:set-image-grade-tool-path: Configure tool location - Multi-architecture support (amd64, arm64, ppc64le, s390x) - Grade filtering and email reporting capabilities - Integration with Red Hat Pyxis API via Kerberos authentication New files: - plugins/security/commands/image-grades.md - plugins/security/commands/set-image-grade-tool-path.md - plugins/security/skills/container-grade-reporter/SKILL.md - plugins/security/README.md - plugins/security/.claude-plugin/plugin.json Bug fixes: - Fix synopsis extraction regex in build-website.py Assisted-by: Claude
1 parent 48e260d commit 4e947a1

File tree

9 files changed

+1678
-1
lines changed

9 files changed

+1678
-1
lines changed

.claude-plugin/marketplace.json

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -39,6 +39,11 @@
3939
"source": "./plugins/session",
4040
"description": "A plugin for Claude session management and persistence"
4141
},
42+
{
43+
"name": "security",
44+
"source": "./plugins/security",
45+
"description": "CVE analysis and container image vulnerability scanning for Red Hat ecosystem"
46+
},
4247
{
4348
"name": "utils",
4449
"source": "./plugins/utils",

PLUGINS.md

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -14,6 +14,7 @@ This document lists all available Claude Code plugins and their commands in the
1414
- [Olm](#olm-plugin)
1515
- [Openshift](#openshift-plugin)
1616
- [Prow Job](#prow-job-plugin)
17+
- [Security](#security-plugin)
1718
- [Session](#session-plugin)
1819
- [Utils](#utils-plugin)
1920
- [Yaml](#yaml-plugin)
@@ -164,6 +165,16 @@ A plugin to analyze and inspect Prow CI job results
164165

165166
See [plugins/prow-job/README.md](plugins/prow-job/README.md) for detailed documentation.
166167

168+
### Security Plugin
169+
170+
Container vulnerability grade reporting using container-grade-reporter tool
171+
172+
**Commands:**
173+
- **`/security:image-grades` `<config.yaml> [--grade <grades>] [--email]`** - Generate container vulnerability grade report using container-grade-reporter
174+
- **`/security:set-image-grade-tool-path` `<path>`** - Configure the path to container-grade-reporter tool
175+
176+
See [plugins/security/README.md](plugins/security/README.md) for detailed documentation.
177+
167178
### Session Plugin
168179

169180
A plugin to save and resume conversation sessions across long time intervals

docs/data.json

Lines changed: 27 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -289,6 +289,33 @@
289289
"skills": [],
290290
"has_readme": true
291291
},
292+
{
293+
"name": "security",
294+
"description": "CVE analysis and container image vulnerability scanning for Red Hat ecosystem",
295+
"version": "0.1.0",
296+
"commands": [
297+
{
298+
"name": "image-grades",
299+
"description": "Generate container vulnerability grade report using container-grade-reporter",
300+
"synopsis": "/security:image-grades <config.yaml> [--grade <grades>] [--email]",
301+
"argument_hint": "<config.yaml> [--grade <grades>] [--email]"
302+
},
303+
{
304+
"name": "set-image-grade-tool-path",
305+
"description": "Configure the path to container-grade-reporter tool",
306+
"synopsis": "/security:set-image-grade-tool-path <path>",
307+
"argument_hint": "<path>"
308+
}
309+
],
310+
"skills": [
311+
{
312+
"name": "Container Grade Reporter Integration",
313+
"id": "container-grade-reporter",
314+
"description": "Integration guide for using the container-grade-reporter tool to fetch and process container vulnerability grades"
315+
}
316+
],
317+
"has_readme": true
318+
},
292319
{
293320
"name": "utils",
294321
"description": "A generic utilities plugin serving as a catch-all for various helper commands",
Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,9 @@
1+
{
2+
"_comment": "Generated by Claude",
3+
"name": "security",
4+
"description": "Container vulnerability grade reporting using container-grade-reporter tool",
5+
"version": "0.1.0",
6+
"author": {
7+
"name": "github.com/openshift-eng"
8+
}
9+
}

0 commit comments

Comments
 (0)