Repository navigation
review: correct AWS pinned plugin denominator and govern eight DevSecOps skills - #511
Merged
Knapp-Kevin merged 1 commit intoOct 30, 2026
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Live denominator correction and source-family macro
At pinned AWS source
ff1481a7bc1a04ee00ebf63d3a8a149aa6a2c546, the recursive Git tree contains 115 front-matteredSKILL.mdexposure paths, 93 names and 94 distinct package-tree identities. The prior 72/72 completeness claim counted only 14 core + 58 specialized skills and omitted 13 DevSecOps plugin skills, 7 AgentCore plugin skills,signing-in-to-aws, and a divergentaws-cdkplugin variant.This bounded tranche adds 8 individually reviewed exact-version DevSecOps plugin skill identities, all REJECT unchanged because private AWS reads/transmission, persistent S3 uploads, live tests/pentests, cloud resources, or Git mutations lack sufficient distinct action-specific authorization. The records preserve useful extraction/checklist patterns and explicit
validation_status: not-run.Accounting: AWS 72/94 → 80/94; gaps 22 → 14; third-party exact-version companions 826 → 834; first-party 44 → 44; combined 870 → 878; admitted-source denominator 72 → 94 (22 previously omitted distinct identities). All five public accounting surfaces, source registry and one macro review updated atomically. No source pin or upstream content changed.
Architecture: No repository-owned runtime, scripts, tests, CI, schedulers, scanners, installers, monitors or background services. Upstream package tooling remains intact as passive reference evidence.
Evidence: Exact manifest blobs and one-file package-tree SHA-1 identities are recorded individually. Apache-2.0 source/license verified. No scanner execution or behavioral acceptance claimed. Full macro review.
Next frontier: 5 remaining DevSecOps, 7 AgentCore, 1
signing-in-to-aws, 1 divergent CDK variant. Existing five drafts #489/#492/#496/#412/#413 remain separate external-evidence HOLDs; this tranche is disjoint from their files.[skip ci]