jeremy-github-actions-gcp
GitHub Actions CI/CD workflows for Google Cloud and Vertex AI deployments
Installation
Open Claude Code and run this command:
/plugin install jeremy-github-actions-gcp@claude-code-plugins-plus
Use --global to install for all projects, or --project for current project only.
What It Does
This plugin ensures secure, production-ready CI/CD pipelines for Vertex AI Agent Engine and Google Cloud services. It enforces Workload Identity Federation (WIF) instead of JSON service account keys, validates post-deployment health, and implements GitHub Actions best practices.
Features
✅ Workload Identity Federation (WIF): Keyless authentication from GitHub to GCP
✅ Vertex AI Agent Engine: Automated deployment and validation pipelines
✅ Security Enforcement: No JSON keys, least privilege IAM, secrets scanning
✅ Post-Deployment Validation: Comprehensive health checks for deployed agents
✅ A2A Protocol Compliance: AgentCard validation and endpoint testing
✅ Automated Hooks: Pre-commit validation of workflow files
✅ Best Practices: OIDC permissions, security scanning, monitoring setup
Skills (1)
'Validate use when validating GitHub Actions workflows for Google Cloud.
How It Works
Natural Language Activation
Simply mention what you need:
"Create GitHub Actions workflow for Vertex AI deployment"
"Set up Workload Identity Federation for my project"
"Deploy ADK agent to Vertex AI Engine with CI/CD"
"Validate my GitHub Actions security"
"Automate Vertex AI agent deployment"
The skill auto-activates and enforces best practices.
Use Cases
Use Case 1: Migrate from JSON Keys to WIF
Problem: Using insecure JSON service account keys in workflows
Solution: Plugin enforces WIF and blocks JSON keys
User: "Create deployment workflow for Vertex AI"
Plugin provides:
1. WIF-based authentication workflow
2. One-time WIF setup script
3. Post-deployment validation
4. Hook prevents JSON key usage
Use Case 2: Secure Vertex AI Deployment
Problem: Need production-ready CI/CD for ADK agents
Solution: Comprehensive deployment pipeline with validation
User: "Deploy my ADK agent to Vertex AI Engine"
Plugin provides:
1. GitHub Actions workflow with WIF
2. Pre-deployment config validation
3. Automated deployment script
4. Post-deployment health checks
5. Monitoring dashboard setup
6. A2A protocol validation
Use Case 3: Enforce Security Best Practices
Problem: Workflows missing security scanning or using weak IAM
Solution: Hook validation + skill enforcement
User: "Update my deployment workflow"
Plugin validates:
1. No JSON keys (blocks if found)
2. OIDC permissions required
3. IAM least privilege
4. Security scanning recommended
5. Post-deployment validation required