-
Notifications
You must be signed in to change notification settings - Fork 45
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Expand plugin spec with installation details #150
Conversation
5fc564e
to
63bf363
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks for the clarification @qmuntal
LGTM
specs/plugin-extensibility.md
Outdated
To be considered a valid plugin a candidate must pass each of these "plugin candidate tests": | ||
|
||
* The directory must contain an executable named `notation-{plugin-name}`. | ||
* The executable can be a regular file or a symbolic link. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Symlink support expands the threat model, as there are ways to exploit them. I'd explicitly mention that we don't support symlinks for now.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Agree, will do that.
3097371
to
10a8fdb
Compare
39b7c81
to
051af10
Compare
Signed-off-by: qmuntal <[email protected]>
Signed-off-by: qmuntal <[email protected]>
Co-authored-by: Milind Gokarn <[email protected]> Signed-off-by: qmuntal <[email protected]>
Signed-off-by: qmuntal <[email protected]>
Signed-off-by: qmuntal <[email protected]>
Co-authored-by: Milind Gokarn <[email protected]> Signed-off-by: qmuntal <[email protected]>
Signed-off-by: qmuntal <[email protected]>
051af10
to
ec89a5c
Compare
This PR expands the plugin extensibility spec so it is more clear and specific on how a plugin is installed.
These are the detailed changes:
.exe
.notation plugin list
command, which was not in the new spec but implemented in feat-kv-extensibility.discover
command to be considered valid.discover
toget-plugin-metadata
@SteveLasker