4 Commits

Author	SHA1	Message	Date
Aaron Powell	7df3657076	fix: remove shell usage from plugin check (#1367) ... * fix: remove shell usage from plugin check Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix: harden plugin symlink scan Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-04-10 14:24:59 +10:00
Simon Kurtz	919fdb3f8e	fix: pin GitHub Actions to immutable SHA hashes to prevent supply chain attacks (#1088) ... * chore: publish from staged * fix: pin GitHub Actions to immutable SHA hashes to prevent supply chain attacks Co-authored-by: simonkurtz-MSFT <84809797+simonkurtz-MSFT@users.noreply.github.com> * chore: publish from staged * Clean plugins * Clean plugins * Clean plugins * Fix gem-team plugin * Reset README.plugins.md --------- Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>	2026-03-23 10:37:40 +11:00
Aaron Powell	f51409f91e	ci: add resolution guidance to plugin structure check ... Provides two options: rebase onto staged (with exact commands using the contributor's branch name) or manually remove the files. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-02-18 16:52:40 +11:00
Aaron Powell	fb1b9e164b	ci: add workflow to detect materialized files in plugin dirs ... Checks PRs targeting staged for agent/command/skill files or symlinks inside plugin directories. These files should only exist on main (materialized during publish). Requests changes if found. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-02-18 16:50:07 +11:00