From 0a131492a9db2544a46cfe802987db7a64589e06 Mon Sep 17 00:00:00 2001 From: tristanroth1 Date: Tue, 20 Oct 2026 15:01:53 +0200 Subject: [PATCH] release: v2026.10.20.1 pins Co-Authored-By: Claude Opus 5.5 --- .claude-plugin/marketplace.json | 2 +- AGENTS.md | 14 +++++++------- CHANGELOG.md | 5 ++++- README.md | 12 ++++++------ 4 files changed, 18 insertions(+), 15 deletions(-) diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json index e6fb687..b415858 100644 --- a/.claude-plugin/marketplace.json +++ b/.claude-plugin/marketplace.json @@ -12,7 +12,7 @@ "source": { "source": "github", "repo": "better-isms/grcskills", - "ref": "v2026.10.20" + "ref": "v2026.10.20.1" }, "category": "security", "tags": [ diff --git a/AGENTS.md b/AGENTS.md index f912768..829a80a 100644 --- a/AGENTS.md +++ b/AGENTS.md @@ -14,21 +14,21 @@ This is the grcskills library: open, task-level GRC skills (Agent Skills format) ## Install -Install from the current release tag, `v2026.10.20`, never from `main` (the integration branch). Releases are immutable and carry a build provenance attestation. +Install from the current release tag, `v2026.10.20.1`, never from `main` (the integration branch). Releases are immutable and carry a build provenance attestation. ```bash -npx skills add better-isms/grcskills#v2026.10.20 # whole library, interactive -npx skills add better-isms/grcskills#v2026.10.20 --skill # one skill -npx skills add better-isms/grcskills/skills/#v2026.10.20 # one author -npx skills add better-isms/grcskills#v2026.10.20 --list # list -git clone --branch v2026.10.20 https://github.com/better-isms/grcskills # clone +npx skills add better-isms/grcskills#v2026.10.20.1 # whole library, interactive +npx skills add better-isms/grcskills#v2026.10.20.1 --skill # one skill +npx skills add better-isms/grcskills/skills/#v2026.10.20.1 # one author +npx skills add better-isms/grcskills#v2026.10.20.1 --list # list +git clone --branch v2026.10.20.1 https://github.com/better-isms/grcskills # clone ``` The `#` suffix makes the skills CLI clone that tag. Target an agent with `-a claude-code`, `-a cursor`, `-a codex`. Claude Code users can also run `/plugin marketplace add better-isms/grcskills` then `/plugin install grcskills@grcskills`; the plugin pins the release tag. Without a terminal, download the skill folder from the release and place it in the agent's skills directory. ## Run the whole library against a setup -1. Make the library available: an install, or `git clone --branch v2026.10.20 https://github.com/better-isms/grcskills` into a temporary folder (ask first). +1. Make the library available: an install, or `git clone --branch v2026.10.20.1 https://github.com/better-isms/grcskills` into a temporary folder (ask first). 2. Open `skills/tristan-roth/grc-setup-review/SKILL.md` and follow it. It reads only the frontmatter of every skill, inspects the user's compliance material read-only, ranks the top 10 skills with impact, effort and a cited reason, audits what is broken, duplicated or missing, and writes `grc-setup-review/*.md` in the user's working folder. 3. To run any ranked skill, read its `SKILL.md` in full, then follow it. Each skill names the files it writes. diff --git a/CHANGELOG.md b/CHANGELOG.md index 0fcc461..e5dfc04 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -4,7 +4,10 @@ Release tags are `vYYYY.MM.DD[.n]`. Installers and the Claude Code plugin consum ## Unreleased -- grcskills.com shows a one-line heyGRC bar above the menu on every page ("From the grcskills team: heyGRC checks each pull request against your frameworks. See how"; a shorter line on phones). A visitor can close it and it stays closed: one flag in the browser's localStorage, written only on that click, nothing sent anywhere. It replaces the footer heyGRC line; the home band and the skill and list page cards stay. +## v2026.10.20.1 + +- grcskills.com shows a one-line heyGRC bar above the menu on every page ("From the grcskills team: heyGRC checks each pull request against your frameworks. See how"; a shorter line on phones). A visitor can close it and it stays closed: one flag in the browser's localStorage, written only on that click, nothing sent anywhere. It replaces the footer heyGRC line; the home band and the skill and list page cards stay (#9). +- Every install pin moves to `v2026.10.20.1`. ## v2026.10.20 diff --git a/README.md b/README.md index 2701d92..449ec91 100644 --- a/README.md +++ b/README.md @@ -4,7 +4,7 @@ grcskills. Open GRC skills for AI agents. It does the legwork. You make the calls. -[![License: MIT](https://img.shields.io/badge/license-MIT-0f172a?style=flat-square)](LICENSE) [![Release v2026.10.20](https://img.shields.io/badge/release-v2026.10.20-0f172a?style=flat-square)](https://github.com/better-isms/grcskills/releases/tag/v2026.10.20) [![60 skills](https://img.shields.io/badge/skills-60-0f172a?style=flat-square)](https://grcskills.com/skills/) [![Agent Skills format](https://img.shields.io/badge/format-Agent%20Skills%20(SKILL.md)-0f172a?style=flat-square)](AGENTS.md) [![Works with Claude Code, Codex and Cursor](https://img.shields.io/badge/works%20with-Claude%20Code%20%7C%20Codex%20%7C%20Cursor-0f172a?style=flat-square)](#install) [![By ISMS Copilot](https://img.shields.io/badge/by-ISMS%20Copilot-0f172a?style=flat-square)](https://www.ismscopilot.com/mcp?ref=grcskills-readme) +[![License: MIT](https://img.shields.io/badge/license-MIT-0f172a?style=flat-square)](LICENSE) [![Release v2026.10.20.1](https://img.shields.io/badge/release-v2026.10.20.1-0f172a?style=flat-square)](https://github.com/better-isms/grcskills/releases/tag/v2026.10.20.1) [![60 skills](https://img.shields.io/badge/skills-60-0f172a?style=flat-square)](https://grcskills.com/skills/) [![Agent Skills format](https://img.shields.io/badge/format-Agent%20Skills%20(SKILL.md)-0f172a?style=flat-square)](AGENTS.md) [![Works with Claude Code, Codex and Cursor](https://img.shields.io/badge/works%20with-Claude%20Code%20%7C%20Codex%20%7C%20Cursor-0f172a?style=flat-square)](#install) [![By ISMS Copilot](https://img.shields.io/badge/by-ISMS%20Copilot-0f172a?style=flat-square)](https://www.ismscopilot.com/mcp?ref=grcskills-readme) # Open GRC skills for AI agents. @@ -51,17 +51,17 @@ The prompt carries no version: [grcskills.com/llms.txt](https://grcskills.com/ll ## Install -Every install path is pinned to a release tag (`v2026.10.20`). Releases are immutable and carry a build provenance attestation; `main` is the integration branch and is not an install source. +Every install path is pinned to a release tag (`v2026.10.20.1`). Releases are immutable and carry a build provenance attestation; `main` is the integration branch and is not an install source. ```bash # the whole library, with an interactive picker (skills.sh) -npx skills add better-isms/grcskills#v2026.10.20 +npx skills add better-isms/grcskills#v2026.10.20.1 # one skill -npx skills add better-isms/grcskills#v2026.10.20 --skill risk-register-first-pass +npx skills add better-isms/grcskills#v2026.10.20.1 --skill risk-register-first-pass # see what is there -npx skills add better-isms/grcskills#v2026.10.20 --list +npx skills add better-isms/grcskills#v2026.10.20.1 --list ``` The `#` suffix makes the skills CLI clone that tag instead of the default branch. Add `-a claude-code`, `-a cursor` or `-a codex` to target one agent. @@ -69,7 +69,7 @@ The `#` suffix makes the skills CLI clone that tag instead of the default b **Clone** the release tag: ```bash -git clone --branch v2026.10.20 https://github.com/better-isms/grcskills +git clone --branch v2026.10.20.1 https://github.com/better-isms/grcskills ``` **Claude Code plugin** (every skill plus the optional framework lookup server):