[github-actions]

Summary

• add speckit-companion in plugins/external.json
• regenerate marketplace outputs for the approved external plugin submission
• source repository: alfredoperez/speckit-companion
• approved from [External Plugin]: speckit-companion #6306

Validation

• npm run build

[Copilot]

🟡 Changes recommended

A critical active finding shows the plugin’s source ref and pinned SHA resolve to different commits, so the consistency quality gate will fail until the locator is corrected and the marketplace output regenerated.

1 open issue

• Source ref and SHA point to different commits · New

What changed in this PR

Adds the approved speckit-companion external Canvas plugin to the Awesome Copilot marketplace and regenerates the marketplace output.

Changes:

• Registers plugin metadata, version, license, keywords, repository path, tag, and immutable commit SHA in plugins/external.json.
• Adds the corresponding generated marketplace entry to .github/plugin/marketplace.json.
• Blocking issue: canvas-v0.2.1 resolves to 3dab03a4..., while the configured SHA is f9b73db5...; the source locators must be reconciled and the marketplace output regenerated.

File	Description
plugins/​external.json	Adds the external speckit-companion plugin registration and source locator.
.github/​plugin/​marketplace.json	Adds the generated marketplace entry for speckit-companion.

_{Review effort: Lite (auto)}

[github-actions]

🚦 Submission status: 👀 Ready for review

Risk tier: merge-risk:high — Privileged execution, automation, or review-policy change
Required to merge: passing submission-gate checks plus 1 approval from reviewers with write access, including a maintainer with admin or maintain permission.

Why this tier

• plugins/external.json is a high-risk path (automation, scripts, MCP config, hooks, or review policy)

Automated checks

Check	Status	Details
Line endings	✅ Passed	Passed · logs
Spelling	✅ Passed	Passed · logs
Generated README consistency	✅ Passed	Passed · logs
Plugin and extension validation	✅ Passed	Passed · logs
Plugin structure	✅ Passed	Passed · logs
Risk scan	✅ Passed	Passed · logs
Contributor reputation	⏭️ Skipped	Skipped by its workflow · logs
Duplicate resource scan	✅ Passed	Passed · logs
PR quality signal	✅ Passed	Passed · logs
Canvas/plugin smoke test	✅ Passed	Passed · logs

Review

• Approvals: 0/1
• Assigned reviewer: not assigned yet — comment /request-review to ask for one
• Review target date: not set
• Still needed: 1 more approval(s); an approval from a maintainer with admin or maintain permission
• The core-maintainers pool is not staffed yet; an approver with admin or maintain permission is required instead.

Commands

Command	Who	What it does
/rerun-checks	PR author, maintainers	Re-runs failed or incomplete checks and re-evaluates this gate
/request-review	PR author, maintainers	Asks the review rotation to assign a reviewer (adds needs-reviewer)

_{Updated for 431a357 · gate run · This comment is maintained automatically — see submission gate docs.}