From 2f42a7ff1ee4711e3a3dbcfbceb0237a0cd13141 Mon Sep 17 00:00:00 2001
From: Ramraj Bishnoie <64191699+ramraaj25@users.noreply.github.com>
Date: Tue, 27 Jan 2026 16:37:46 -0500
Subject: [PATCH 1/2] updating codeguard version in SKILLS.md

---
 skills/software-security/SKILL.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/skills/software-security/SKILL.md b/skills/software-security/SKILL.md
index 0d846b4..9723b17 100644
--- a/skills/software-security/SKILL.md
+++ b/skills/software-security/SKILL.md
@@ -1,7 +1,7 @@
 ---
 name: software-security
 description: A software security skill that integrates with Project CodeGuard to help AI coding agents write secure code and prevent common vulnerabilities. Use this skill when writing, reviewing, or modifying code to ensure secure-by-default practices are followed.
-codeguard-version: "1.1.0"
+codeguard-version: "1.2.0"
 framework: "Project CodeGuard"
 purpose: "Embed secure-by-default practices into AI coding workflows"
 ---
@@ -85,4 +85,4 @@ After writing code:
 - Verify no hardcoded credentials or secrets
 - Validate that all the rules have been successfully followed when applicable.
 - Explain which security rules were applied
-- Highlight security features implemented
\ No newline at end of file
+- Highlight security features implemented

From 88ea2d36e510c87702162876f27dc38c2883b961 Mon Sep 17 00:00:00 2001
From: Ramraj Bishnoie <rambishn@cisco.com>
Date: Tue, 27 Jan 2026 17:02:53 -0500
Subject: [PATCH 2/2] chore: update marketplace and SKILL version to 1.2.0 and
 add version validation for SKILL.md

---
 .claude-plugin/marketplace.json |  2 +-
 src/validate_versions.py        | 42 +++++++++++++++++++++++++++++----
 2 files changed, 39 insertions(+), 5 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index a44395f..8b30589 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -13,7 +13,7 @@
       "name": "codeguard-security",
       "source": "./",
       "description": "Comprehensive security rules for AI coding agents",
-      "version": "1.1.0",
+      "version": "1.2.0",
       "repository": "https://github.com/project-codeguard/rules.git",
       "tags": [
         "security",
diff --git a/src/validate_versions.py b/src/validate_versions.py
index 99eb939..688f097 100644
--- a/src/validate_versions.py
+++ b/src/validate_versions.py
@@ -13,6 +13,7 @@
 """
 
 import json
+import re
 import sys
 import tomllib
 from pathlib import Path
@@ -21,6 +22,7 @@
 
 class VersionCheck(NamedTuple):
     """Result of a version check."""
+
     file: str
     expected: str
     found: str
@@ -74,6 +76,29 @@ def set_marketplace_version(version: str, root: Path) -> None:
         f.write("\n")
 
 
+def _read_front_matter_value(path: Path, key: str) -> str:
+    """Read a YAML front-matter value from a markdown file."""
+    content = path.read_text(encoding="utf-8")
+    front_matter_match = re.match(r"^---\s*\n(.*?)\n---\s*\n", content, re.DOTALL)
+    if not front_matter_match:
+        raise ValueError(f"Missing front matter in {path}")
+    front_matter = front_matter_match.group(1)
+    value_match = re.search(
+        rf'^{re.escape(key)}:\s*"([^"]+)"\s*$',
+        front_matter,
+        re.MULTILINE,
+    )
+    if not value_match:
+        raise ValueError(f"Missing {key} in front matter for {path}")
+    return value_match.group(1)
+
+
+def get_skill_codeguard_version(root: Path) -> str:
+    """Get codeguard-version from skills/software-security/SKILL.md."""
+    skill_path = root / "skills" / "software-security" / "SKILL.md"
+    return _read_front_matter_value(skill_path, "codeguard-version")
+
+
 def validate_versions(expected_version: str, root: Path = None) -> list[VersionCheck]:
     """
     Validate all versions match the expected version.
@@ -89,15 +114,24 @@ def validate_versions(expected_version: str, root: Path = None) -> list[VersionC
         root = Path(__file__).parent.parent
 
     checks = [
-        VersionCheck("pyproject.toml", expected_version, get_pyproject_version(root), False),
+        VersionCheck(
+            "pyproject.toml", expected_version, get_pyproject_version(root), False
+        ),
         VersionCheck("plugin.json", expected_version, get_plugin_version(root), False),
-        VersionCheck("marketplace.json", expected_version, get_marketplace_version(root), False),
+        VersionCheck(
+            "marketplace.json", expected_version, get_marketplace_version(root), False
+        ),
+        VersionCheck(
+            "SKILL.md",
+            expected_version,
+            get_skill_codeguard_version(root),
+            False,
+        ),
     ]
 
     # Update matches field
     return [
-        VersionCheck(c.file, c.expected, c.found, c.expected == c.found)
-        for c in checks
+        VersionCheck(c.file, c.expected, c.found, c.expected == c.found) for c in checks
     ]