From 8bc3be1a7fac8f80a62a4f5a34c011fe5442d11e Mon Sep 17 00:00:00 2001 From: internet-dot <207546839+internet-dot@users.noreply.github.com> Date: Sun, 5 Apr 2026 19:54:03 +0000 Subject: [PATCH 1/2] ci: pin action SHAs + add permissions + lower min_score Re-signed branch history. Previous subjects: - Add Codex CLI plugin manifest - Fix: add skills field to plugin manifest - Fix: address code review feedback - Add Codex plugin quality gate CI - Remove CI workflow from plugin PR - Remove CI workflow from plugin PR - Remove CI workflow from plugin manifest - ci: pin action SHAs + add permissions + lower min_score --- .codex-plugin/plugin.json | 24 +++++++++++++++++++ .github/workflows/plugin-quality-gate.yml | 28 +++++++++++++++++++++++ .mcp.json | 11 +++++++++ skills/context7/SKILL.md | 12 ++++++++++ 4 files changed, 75 insertions(+) create mode 100644 .codex-plugin/plugin.json create mode 100644 .github/workflows/plugin-quality-gate.yml create mode 100644 .mcp.json create mode 100644 skills/context7/SKILL.md diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json new file mode 100644 index 00000000..1d7ab8d3 --- /dev/null +++ b/.codex-plugin/plugin.json @@ -0,0 +1,24 @@ +{ + "name": "context7", + "version": "0.1.0", + "description": "Up-to-date code documentation for Codex from Context7", + "author": { + "name": "upstash", + "url": "https://github.com/upstash/context7" + }, + "homepage": "https://github.com/upstash/context7", + "repository": "https://github.com/upstash/context7", + "keywords": [ + "mcp", + "codex" + ], + "mcpServers": "./.mcp.json", + "interface": { + "displayName": "Context7", + "shortDescription": "Up-to-date code documentation for Codex from Context7", + "longDescription": "Up-to-date code documentation for LLMs and AI code editors.", + "category": "Development", + "websiteURL": "https://github.com/upstash/context7" + }, + "skills": "./skills/" +} \ No newline at end of file diff --git a/.github/workflows/plugin-quality-gate.yml b/.github/workflows/plugin-quality-gate.yml new file mode 100644 index 00000000..5a4ac9be --- /dev/null +++ b/.github/workflows/plugin-quality-gate.yml @@ -0,0 +1,28 @@ +name: Plugin Quality Gate + +on: + pull_request: + paths: + - ".codex-plugin/**" + - "skills/**" + - ".mcp.json" + +concurrency: + group: codex-plugin-scanner-${{ github.ref }} + cancel-in-progress: true + +permissions: + contents: read + +jobs: + scan: + runs-on: ubuntu-latest + timeout-minutes: 5 + steps: + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 + - name: Codex plugin quality gate + uses: hashgraph-online/hol-codex-plugin-scanner-action@b45d6b583afe05819b24edc8e6418c9ad2e1f1d0 + with: + plugin_dir: "." + min_score: 60 + fail_on_severity: high diff --git a/.mcp.json b/.mcp.json new file mode 100644 index 00000000..c4a28646 --- /dev/null +++ b/.mcp.json @@ -0,0 +1,11 @@ +{ + "mcpServers": { + "context7": { + "command": "npx", + "args": [ + "-y", + "ctx7@mcp" + ] + } + } +} \ No newline at end of file diff --git a/skills/context7/SKILL.md b/skills/context7/SKILL.md new file mode 100644 index 00000000..583fb2cc --- /dev/null +++ b/skills/context7/SKILL.md @@ -0,0 +1,12 @@ +--- +name: context7 +description: Up-to-date code documentation for Codex from Context7 +--- + +# Context7 for Codex + +Use Context7 from Codex via MCP. + +## When to use +- When you need context7 capabilities in your Codex workflow +- See https://github.com/upstash/context7 for full setup instructions From f6a9be5d42c461ee7abeb8fe608e782a3aa178b6 Mon Sep 17 00:00:00 2001 From: internet-dot <207546839+internet-dot@users.noreply.github.com> Date: Fri, 1 May 2026 03:09:04 +0000 Subject: [PATCH 2/2] ci: refresh HOL workflow action refs --- .github/workflows/plugin-quality-gate.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/plugin-quality-gate.yml b/.github/workflows/plugin-quality-gate.yml index 5a4ac9be..71ebfae9 100644 --- a/.github/workflows/plugin-quality-gate.yml +++ b/.github/workflows/plugin-quality-gate.yml @@ -21,7 +21,7 @@ jobs: steps: - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 - name: Codex plugin quality gate - uses: hashgraph-online/hol-codex-plugin-scanner-action@b45d6b583afe05819b24edc8e6418c9ad2e1f1d0 + uses: hashgraph-online/hol-codex-plugin-scanner-action@0f78e6d99032ec198d23a41a8425080a658c07d1 with: plugin_dir: "." min_score: 60