Claude Code plugins
2 plugins from public Claude Code marketplaces. Each one bundles skills, slash commands, agents, hooks or MCP servers that install together.
Showing 2 plugins that match these filters. Clear filters
Security scanning across SAST, DAST, SCA, secrets and SBOM: Semgrep, CodeQL, SonarQube, ZAP, Nuclei, Snyk, OSV-Scanner, gitleaks, Syft and Trivy. Also covers language-native SAST linters, Dependabot and Renovate, package-manager audits, reachability and CVE exploitability triage, secret rotation, and VEX. A gate agent (security-finding-triager) normalizes, dedupes and waiver-checks multi-scanner output, including IaC findings from qa-iac, into one BLOCK / PASS verdict per domain. Every scanner skill includes a false-positive triage section.
security-compliance
GitHub repository setup and platform-specific features. Branch protection, CODEOWNERS, Issues/Discussions/Projects, PR review workflows with conversation resolution, Dependabot/Renovate auto-merge, and GitHub Releases. Platform-only — CI/CD and security live in sibling skills. By Netresearch.