Aaron Powell 351221bb9c Tighten external plugin PR workflow permissions ...

Scope write permissions to the PR synchronization job, keep the quality-gate job read-only, and handle no-op and detection-failure states explicitly. Also fix source tree link encoding for refs, SHAs, and plugin paths.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

2026-06-16 13:39:14 +10:00

..

build-website.yml

fix: add explicit permissions to build-website workflow (CodeQL alert #30) (#1759)

2026-05-19 12:25:17 +10:00

check-line-endings.yml

fix: pin GitHub Actions to immutable SHA hashes to prevent supply chain attacks (#1088)

2026-03-23 10:37:40 +11:00

check-plugin-structure.yml

feat(skills): add IoT edge skills and align agent/instruction docs (#1431)

2026-04-29 11:15:42 +10:00

check-pr-target.yml

fix: auto-approve bot review when PR base is changed off main (#1971)

2026-06-12 12:21:47 +10:00

cli-for-beginners-sync.lock.yml

Agentic Workflows update (#1727)

2026-05-15 16:33:29 +10:00

cli-for-beginners-sync.md

updating agentic workflows (#1666)

2026-05-11 11:29:18 +10:00

codeowner-update.lock.yml

Agentic Workflows update (#1727)

2026-05-15 16:33:29 +10:00

codeowner-update.md

Updating agentic workflows (#1397)

2026-04-16 08:57:55 +10:00

codespell.yml

fix: pin GitHub Actions to immutable SHA hashes to prevent supply chain attacks (#1088)

2026-03-23 10:37:40 +11:00

contributor-check.yml

Patching the comment with the check results over creating a new one (#1637)

2026-05-07 10:02:09 +10:00

contributors.yml

fix: default contributor bot PRs to staged (#1256)

2026-04-02 10:02:43 +11:00

copilot-setup-steps.yml

updating agentic workflows (#1666)

2026-05-11 11:29:18 +10:00

deploy-website.yml

Bumping to node 22 for astro (#1618)

2026-05-05 12:01:49 +10:00

duplicate-resource-detector.lock.yml

Agentic Workflows update (#1727)

2026-05-15 16:33:29 +10:00

duplicate-resource-detector.md

Remove prompt references from duplicate-resource-detector workflow

2026-02-27 10:20:13 +11:00

external-plugin-approval-command.yml

Fix external plugin command concurrency issues (#1958)

2026-06-10 15:14:57 +10:00

external-plugin-command-router.yml

Route intake failures to submitter fixes (#1970)

2026-06-11 15:17:32 +10:00

external-plugin-intake.yml

Add workflow run link to external plugin intake comments (#1915)

2026-06-04 12:30:39 -07:00

external-plugin-pr-quality-gates.yml

Tighten external plugin PR workflow permissions

2026-06-16 13:39:14 +10:00

external-plugin-quality-gates.yml

Add external plugin quality gates and maintainer override flow (#1860)

2026-05-28 15:50:13 +10:00

external-plugin-rereview-command.yml

Fix external plugin command concurrency issues (#1958)

2026-06-10 15:14:57 +10:00

external-plugin-rereview.yml

The new lines weren't working properly as we'd filter them out, whoops (#1951)

2026-06-10 14:44:16 +10:00

label-pr-intent.yml

fix: grant pull-requests: write permission in label-pr-intent workflow (#1612)

2026-05-05 09:52:57 +10:00

learning-hub-updater.lock.yml

Agentic Workflows update (#1727)

2026-05-15 16:33:29 +10:00

learning-hub-updater.md

Content updater workflow change (#1189)

2026-03-27 15:46:56 +11:00

pr-duplicate-check.lock.yml

Agentic Workflows update (#1727)

2026-05-15 16:33:29 +10:00

pr-duplicate-check.md

Updating workflow to ignore noop (#1135)

2026-03-23 15:29:43 +11:00

pr-risk-scan-comment.yml

Add soft-gate PR risk scan automation for agentic PRs (#1969)

2026-06-15 10:59:01 +10:00

pr-risk-scan.yml

Add soft-gate PR risk scan automation for agentic PRs (#1969)

2026-06-15 10:59:01 +10:00

publish.yml

Make main and marketplace publishes append-only (#1830)

2026-05-26 10:44:36 +10:00

resource-staleness-report.lock.yml

Agentic Workflows update (#1727)

2026-05-15 16:33:29 +10:00

resource-staleness-report.md

Agentic Workflows update (#1727)

2026-05-15 16:33:29 +10:00

skill-check-comment.yml

The new lines weren't working properly as we'd filter them out, whoops (#1951)

2026-06-10 14:44:16 +10:00

skill-check.yml

Fix skill-check command injection (#1869)

2026-05-29 14:09:52 +10:00

skill-quality-report.yml

Consolidate scripts and automate report management (#1540)

2026-04-28 17:29:40 +10:00

traffic-reporting.yml

Add scheduled trigger to traffic reporting workflow (#519)

2025-12-23 14:26:13 -08:00

validate-agentic-workflows-pr.yml

fix: pin GitHub Actions to immutable SHA hashes to prevent supply chain attacks (#1088)

2026-03-23 10:37:40 +11:00

validate-readme.yml

Fixing code scanning #24 (#1760)

2026-05-19 12:25:39 +10:00

webhook-caller.yml

Adding an action to invoke webhooks (#78)

2025-07-28 09:53:17 +10:00