Repository navigation
Add drevon - #708
Add drevon#708csakash wants to merge 2 commits into
Conversation
| @csakash, The centralized scan returned failure; it did not establish a score of at least 80. Keep the contribution blocked until the centralized score is available and meets the threshold. Finding severities are advisory for listing eligibility. [Open the source scan job summaries and download sanitized JSON/SARIF findings](https://github.com/hashgraph-online/awesome-ai-plugins/actions/runs/39721819853). Look for the `scan-findings-pr-708-` artifact. Reports include rule IDs and file locations, but omit source snippets and credential values. A missing report indicates a scanner execution problem, not a passing scan. Keep this contribution unmerged until a completed centralized score of at least 80 is available; finding severities are advisory and source-repository scanner CI is optional. If the completed report confirms a score below 80, source-repository scanner CI is recommended, not required: use the SHA-pinned workflow in SCANNER_GUIDE.md, reproduce locally, run the same pinned scanner on push and pull requests, fix or document rule-level findings, link the source run, rerun the catalog scan, and request review. See [contribution requirements](https://github.com/hashgraph-online/awesome-ai-plugins/blob/main/CONTRIBUTING.md) and [scanner guide](https://github.com/hashgraph-online/awesome-ai-plugins/blob/main/SCANNER_GUIDE.md). [Latest sweep](https://github.com/hashgraph-online/awesome-ai-plugins/actions/runs/39721819853). |
|
The centralized score is 69/100, below the required 80. No HOL Plugin Scanner workflow is present in the source repository; please use the pinned workflow in SCANNER_GUIDE.md, reproduce it locally with the ecosystem-appropriate setup, run the same SHA-pinned scanner in source CI on push and pull_request, fix or document each rule-level finding (1 high and 4 medium), link the source run, then rerun the catalog scan and request review once the score reaches 80. The source repository has no manifest at any path supported by the catalog generator, so artifact sync would publish a fallback |
|
Centralized scan scored 69/100, below the required 80, and the linked drevon repository currently returns 404. Please restore public access or correct the source link; once accessible, reproduce the scan locally in the project's documented environment, remediate the flagged rules or document justified exceptions, add a GitHub Actions workflow running the same scanner pinned to a full commit SHA, link a successful source-repository run, then request a catalog rescan and review using the workflow template in the catalog's SCANNER_GUIDE.md. |
|
The centralized scan remains 69/100 (<80), so this listing is not merge-ready. The source repo has general CI but no HOL Plugin Scanner workflow; adding the SHA-pinned workflow from SCANNER_GUIDE.md is recommended, not a listing prerequisite. Please reproduce the scan locally, address or document the reported rule findings, add the same pinned scanner to push/PR CI, link a source run, rerun the catalog scan to reach at least 80, and request re-review. |
|
Thanks for the detailed review. drevon is a CLI workspace tool rather than a packaged plugin (no plugin manifest yet), so I'll withdraw this for now and resubmit once it ships a manifest and passes the HOL scanner. (The repo is public: https://github.com/csakash/drevon.) |
Adds drevon to the Community Plugins > Development & Workflow section.
npx drevon initturns any directory into an AI workspace with one shared config, persistent cross-session memory, prompts and skills for Claude Code, Codex, Copilot, Cursor, Windsurf, Cline, Aider and Continue.Disclosure: I'm the maker of Drevon. I've followed the contributing guidelines (format, ordering, one entry per PR).