Commit Graph

3 Commits

Author SHA1 Message Date
Simon Kurtz
919fdb3f8e fix: pin GitHub Actions to immutable SHA hashes to prevent supply chain attacks (#1088)
* chore: publish from staged

* fix: pin GitHub Actions to immutable SHA hashes to prevent supply chain attacks

Co-authored-by: simonkurtz-MSFT <84809797+simonkurtz-MSFT@users.noreply.github.com>

* chore: publish from staged

* Clean plugins

* Clean plugins

* Clean plugins

* Fix gem-team plugin

* Reset README.plugins.md

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
2026-03-23 10:37:40 +11:00
Aaron Powell
f51409f91e ci: add resolution guidance to plugin structure check
Provides two options: rebase onto staged (with exact commands using
the contributor's branch name) or manually remove the files.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-02-18 16:52:40 +11:00
Aaron Powell
fb1b9e164b ci: add workflow to detect materialized files in plugin dirs
Checks PRs targeting staged for agent/command/skill files or symlinks
inside plugin directories. These files should only exist on main
(materialized during publish). Requests changes if found.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-02-18 16:50:07 +11:00