privilegedescalation/headlamp-argocd-plugin
12
0
Fork 0
Code Issues 4 Pull Requests 3 Actions Packages Projects Releases 2 Wiki Activity
17 Commits 29 Branches 2 Tags
v0.1.2
Commit Graph

4 Commits

Author SHA1 Message Date
github-actions[bot] c648b43493 release: v0.1.2 2026-05-04 06:38:54 +00:00
privilegedescalation-engineer[bot] 730f7cbe54 fix: override lodash >=4.18.0 to patch code injection vulnerability (#7) 
* fix: override lodash >=4.18.0 to patch code injection vulnerability

GHSA-r5fr-rjxr-66jc is a code injection vulnerability in lodash
below 4.18.0. The vulnerable transitive dependency comes through
@kinvolk/headlamp-plugin.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

* Regenerate lockfile for lodash override

Co-Authored-By: Paperclip <noreply@paperclip.ing>

---------

Co-authored-by: Gandalf the Greybeard <gandalf@privilegedescalation.dev>
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
Co-authored-by: Chris Farhood <chris@farhood.org>
Co-authored-by: Paperclip <noreply@paperclip.ing>
 2026-05-04 03:24:00 +00:00
Test User a0031fc59a feat: scaffold headlamp-argocd-plugin with standard plugin structure 
Adds the full plugin scaffold matching the Headlamp plugin pattern
(polaris, kube-vip, etc.):
- package.json with full devDependencies (Vitest, TypeScript, ESLint, Prettier)
- tsconfig.json, vitest.config.mts, vitest.setup.ts
- src/index.tsx with ArgoCDErrorBoundary and stub Applications route
- src/index.test.tsx smoke test to verify module importability
- CLAUDE.md documentation for future development
- .gitignore for node_modules/dist
- pnpm-lock.yaml pinned via packageManager field

ArtifactHub metadata already present (created by Hugh in PRI-186).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-04-21 20:16:07 +00:00
Hugh Hackman 86ef11f8e6 Add CI/release workflows, artifacthub-pkg.yml, and package.json 
- Add .github/workflows/ci.yaml (calls plugin-ci from .github repo)
- Add .github/workflows/release.yaml (calls plugin-release from .github repo)
- Add artifacthub-pkg.yml for ArtifactHub distribution
- Add package.json with headlamp-plugin scripts
- Add README.md

Co-Authored-By: Paperclip <noreply@paperclip.ing>
 2026-04-21 20:05:49 +00:00