skills.rest
broadinstitute
broadinstituteOFFICIAL
Explore all skills by this author →
Website𝕏@broadinstituteGitHub

Claude on Vertex AI from GitHub Actions

Invoke Claude on Google Vertex AI from GitHub Actions workflows.

198|67|Updated Sep 25, 2014
Search Tags:#automation#claude code#github actions#oidc#vertex ai#ci security#workload identity federation
One-click install
npx skills add https://github.com/broadinstitute/viral-ngs --skill claude-on-vertex-ai-from-github-actions
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Claude on Vertex AI from GitHub Actions
Source: https://github.com/broadinstitute/viral-ngs/tree/main/.agents/skills/claude-on-vertex-ci
Command: npx skills add https://github.com/broadinstitute/viral-ngs --skill claude-on-vertex-ai-from-github-actions

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps you invoke Claude from GitHub Actions workflows on Google Vertex AI without storing long-lived secrets, using Workload Identity Federation for secure authentication.

Core Features & Use Cases

  • Secure GitHub-to-Vertex authentication: Uses Workload Identity Federation to mint short-lived credentials instead of static service account keys.
  • Reusable CI workflow infrastructure: Provides a canonical GitHub Actions pattern using anthropics/claude-code-action with Vertex settings and an allowlisted tool permission policy.
  • Principled least-privilege setup: Recommends creating one service account per use case and binding it to the repo/workflow scope via IAM conditions.

Quick Start

Add a new use case by creating a dedicated service account and service identity binding for your workflow, then copy the canonical GitHub Actions steps to authenticate via WIF and run the Claude action against Vertex AI for your prompt.

Frequently Asked Questions about Claude on Vertex AI from GitHub Actions

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run Claude on Vertex AI from GitHub Actions without storing static secrets?▼

You can run Claude on Vertex AI from GitHub Actions securely by using Workload Identity Federation (WIF) to mint short-lived credentials, eliminating the need for static service account keys.

What CI automation tasks can I trigger using Claude with GitHub Actions?▼

Claude can automate CI tasks like pull request review, CVE triage, dependency analysis, and automated documentation generation triggered by GitHub events.

How do I configure workload identity federation for Claude Code in Vertex AI?▼

Configure workload identity federation by creating a dedicated service account, binding it to the repository scope via IAM conditions, and authenticating using the google-github-actions/auth action.

Can I use anthropics/claude-code-action with Google Vertex AI environments?▼

Yes, you can use anthropics/claude-code-action with Vertex AI by configuring the appropriate Vertex environment variables and applying an explicit tool permission allowlist for security.

Does Claude on Vertex AI require a least-privilege setup for CI workflows?▼

Yes, the setup requires a principled least-privilege approach, recommending one dedicated service account per use case bound to the specific repo and workflow scope via IAM conditions.

Related Skills

Explore More Software Engineering Skills→
adaptive-enforcement-labadaptive-enforcement-lab
3

oidc-federation-patterns

Automates OpenID Connect federation to get short-lived cloud credentials in GitHub Actions workflows.

Official
Advanced
boomNDSboomNDS

github-workflow-automation

Automate GitHub workflows with AI-assisted PR reviews, issue triage, and CI/CD integration.

Community
Advanced
rhpdsrhpds

01-vertex-setup

Configure Claude Code to use Google Cloud Vertex AI as the backend provider.

Official
Advanced
wangx7wangx7

google-cloud-recipe-auth

Configure secure Google Cloud authentication and authorization for human and service principal use cases.

Community
Intermediate