claude-plugins/.github/workflows/scan-plugins.yml

name: Scan Plugins

on:
  pull_request:
    paths:
      - '.claude-plugin/marketplace.json'

permissions:
  contents: read

jobs:
  scan:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0

      # Non-blocking by default. Graceful no-op if ANTHROPIC_API_KEY is not
      # configured on the repo. To enforce, set fail-on-findings: "true".
      - uses: anthropics/claude-plugins-community/.github/actions/scan-plugins@f846a0bcb0e721b1f93d60e8b73e91dafc4a1e87
        with:
          anthropic-api-key: ${{ secrets.ANTHROPIC_API_KEY }}
          claude-cli-version: latest