Awesome/awesome-copilot
1
0
Fork 0
mirror of https://github.com/github/awesome-copilot.git synced 2026-08-26 18:45:12 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,982 Commits 17 Branches 0 Tags
3d1fecfdc16d96f80aac171d9148b53fcfaf7f20
Commit Graph
5 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Imran SiddiqueandCopilot c02894b9ad feat(ci): add contributor reputation check workflow (#1520) 
Add automated contributor reputation screening on PR/issue open events
using AGT's pip-installable CLI tools. Detects coordinated inauthentic
contribution patterns (credential laundering, spray-and-pray).

- Installs via pip (pinned to agent-governance-toolkit==3.3.0)
- Uses jq for JSON parsing
- Fails closed: UNKNOWN risk maps to MEDIUM
- Posts risk summary comment on MEDIUM/HIGH with link to workflow run
- Adds needs-review label for maintainer attention

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
 2026-05-04 14:16:27 +10:00
Imran SiddiqueandCopilot e95bd8c4ba feat: add 3 agent security skills (MCP audit, OWASP compliance, supply chain) (#1248) 
* feat: add 3 agent security skills (MCP audit, OWASP compliance, supply chain)

- mcp-security-audit: Audit .mcp.json files for hardcoded secrets,
  shell injection, unpinned versions, dangerous command patterns
- agent-owasp-compliance: Check agent systems against OWASP ASI 2026
  Top 10 risks with compliance report generation
- agent-supply-chain: SHA-256 integrity manifests, tamper detection,
  version pinning audit, promotion gates for agent plugins

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* fix: address all 9 review comments

1. Added 3 new skills to docs/README.skills.md index
2. Added imports (json, re) to shell injection check snippet
3. Updated unpinned deps wording to match code behavior (@latest only)
4. Moved check_secrets() outside per-server loop to avoid duplicates
5. Added imports note to verify_manifest snippet
6. Updated promotion_check to support both .github/plugin and .claude-plugin layouts
7. Updated CI example to cd into plugin directory before verifying
8. Added check sections for all 10 ASI controls (was missing 03, 04, 06, 08, 10)
9. Made ASI-01 code snippet runnable with actual file scanning implementation

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* chore: regenerate docs/README.skills.md via npm start

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
 2026-04-09 15:33:08 +10:00
Imran Siddique 55d3bf6626 chore: update Agent Governance Toolkit URLs to microsoft/ org (#1008) 2026-03-17 08:31:14 +11:00
Imran SiddiqueandCopilot da3dbec8b9 Update SKILL.md 
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
 2026-02-18 14:41:52 -08:00
Imran SiddiqueandCopilot 8d942f437b Update SKILL.md 
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
 2026-02-18 14:41:40 -08:00