privilegedescalation/headlamp-argocd-plugin

T

privilegedescalation-engineer[bot] 730f7cbe54 fix: override lodash >=4.18.0 to patch code injection vulnerability (#7 )

* fix: override lodash >=4.18.0 to patch code injection vulnerability

GHSA-r5fr-rjxr-66jc is a code injection vulnerability in lodash
below 4.18.0. The vulnerable transitive dependency comes through
@kinvolk/headlamp-plugin.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

* Regenerate lockfile for lodash override

Co-Authored-By: Paperclip <noreply@paperclip.ing>

---------

Co-authored-by: Gandalf the Greybeard <gandalf@privilegedescalation.dev>
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
Co-authored-by: Chris Farhood <chris@farhood.org>
Co-authored-by: Paperclip <noreply@paperclip.ing>

2026-05-04 03:24:00 +00:00

.github

chore: add FUNDING.yml for GitHub Sponsors

2026-04-22 18:52:47 +00:00

src

feat(page-injections): inject ArgoCD info into Namespace and Deployment detail views

2026-04-21 20:53:51 +00:00

.eslintrc.js

fix: add ESLint config and correct artifacthub checksum

2026-04-21 20:20:24 +00:00

.gitignore

feat: scaffold headlamp-argocd-plugin with standard plugin structure

2026-04-21 20:16:07 +00:00

artifacthub-pkg.yml

fix: add ESLint config and correct artifacthub checksum

2026-04-21 20:20:24 +00:00

artifacthub-repo.yml

Add artifacthub-repo.yml placeholder

2026-04-21 20:06:30 +00:00

CLAUDE.md

docs: update CLAUDE.md architecture to reflect ApplicationsList

2026-04-21 20:40:41 +00:00

LICENSE

Initial commit

2026-04-21 20:04:40 +00:00

package.json

fix: override lodash >=4.18.0 to patch code injection vulnerability (#7 )

2026-05-04 03:24:00 +00:00

pnpm-lock.yaml

fix: override lodash >=4.18.0 to patch code injection vulnerability (#7 )

2026-05-04 03:24:00 +00:00

README.md

Add CI/release workflows, artifacthub-pkg.yml, and package.json

2026-04-21 20:05:49 +00:00

tsconfig.json

feat: scaffold headlamp-argocd-plugin with standard plugin structure

2026-04-21 20:16:07 +00:00

vitest.config.mts

feat: scaffold headlamp-argocd-plugin with standard plugin structure

2026-04-21 20:16:07 +00:00

vitest.setup.ts

feat: scaffold headlamp-argocd-plugin with standard plugin structure

2026-04-21 20:16:07 +00:00

README.md

headlamp-argocd

A Headlamp plugin for ArgoCD visibility.

Monitors ArgoCD Applications, Rollouts, and health status. Read-only — no cluster write operations.

Installation

Install via Headlamp's built-in plugin installer (ArtifactHub):

# Install from Headlamp UI → Settings → Plugins → Add plugin
# Search for "argocd" or paste the ArtifactHub URL

Development

npm install
npm run build
npm test

Release

Releases are automated via the GitHub Actions release workflow:

gh workflow run Release --field version=0.1.0

License

Apache-2.0