security

Agent plugins

Installation

Plugins are compatible with both [GitHub Copilot CLI] and [Claude Code]. Within the coding assistants, you can run the same commands with /plugin instead of the plugin CLI command e.g.,

/plugin marketplace add heaths/plugins

GitHub Copilot CLI

To install this marketplace into [GitHub Copilot CLI] run:

copilot plugin marketplace add heaths/plugins

Claude Code

To install this marketplace into [Claude Code] run:

claude plugin marketplace add heaths/plugins

Sharing with contributors

You can recommend this marketplace and its plugins to everyone who works in a repository by committing a .claude/settings.json file to that repository. When contributors trust the project folder in [Claude Code], they are prompted to install the marketplace and any enabled plugins.

Example .claude/settings.json:

{
  "extraKnownMarketplaces": {
    "heaths-plugins": {
      "source": {
        "source": "github",
        "repo": "heaths/plugins"
      }
    }
  },
  "enabledPlugins": {
    "linting@heaths-plugins": true
  }
}

> Note: [GitHub Copilot CLI] does not currently support project-level plugin recommendations. Contributors using Copilot CLI should run the marketplace and plugin install commands above individually.

Plugins

azsdk-samples-mcp

Discovers and retrieves code samples from Azure SDK packages in .NET, Node.js, and Rust projects.

# GitHub Copilot CLI
copilot plugin install azsdk-samples-mcp@heaths-plugins

# Claude Code
claude plugin install azsdk-samples-mcp@heaths-plugins

linting

Skills and tools for formatting and linting.

| Skill | Description | | --- | --- | | check-spelling | Check and fix spelling in project source files using cSpell | | lint-markdown | Check and fix formatting and other issues in markdown files using markdownlint-cli2 |

# GitHub Copilot CLI
copilot plugin install linting@heaths-plugins

# Claude Code
claude plugin install linting@heaths-plugins

security

Skills and tools for supply chain security.

| Skill | Description | | --- | --- | | pin-github-actions | Run when adding or updating GitHub Actions workflow steps. Pin every action to a commit SHA with the resolved version tag as a trailing comment |

# GitHub Copilot CLI
copilot plugin install security@heaths-plugins

# Claude Code
claude plugin install security@heaths-plugins

License

Licensed under the MIT license.

[GitHub Copilot CLI]: https://github.com/features/copilot/cli/ [Claude Code]: https://claude.ai/code