Skip to content

Enforce marketplace source policy for curated plugins - #41953

Merged
copyberry[bot] merged 1 commit into
mainfrom
copyberry/codex-internal-to-codex-oss/04617acb4a93040c70a13759eb4ce872877ba211
Sep 1, 2026
Merged

Enforce marketplace source policy for curated plugins#41953
copyberry[bot] merged 1 commit into
mainfrom
copyberry/codex-internal-to-codex-oss/04617acb4a93040c70a13759eb4ce872877ba211

Conversation

@copyberry

@copyberry copyberry Bot commented Sep 1, 2026 •
edited
Loading

Copy link
Copy Markdown

Enforce marketplace source policy for curated plugins

Why

Marketplace source restrictions should cover curated plugins backed by the OpenAI plugins repository, not only user-configured marketplaces.

What changed

  • Validate both local curated catalogs against the existing OpenAI plugins Git source allowlist.
  • Apply that policy to catalog discovery, installation, cached plugin and skill loading, and startup repository sync.
  • Keep bundled and remote installed plugins independent of the curated Git source policy.

Testing

Added coverage for exact and shorthand Git allowlist entries, host patterns, blocked and invalid rules, curated catalog variants, plugin skills, startup sync, and remote installed plugins.

@willwang-openai copyberry
Enforce marketplace source policy for curated plugins (#41953)
633ab19 
## Why

Marketplace source restrictions should cover curated plugins backed by the OpenAI plugins repository, not only user-configured marketplaces.

## What changed

- Validate both local curated catalogs against the existing OpenAI plugins Git source allowlist.
- Apply that policy to catalog discovery, installation, cached plugin and skill loading, and startup repository sync.
- Keep bundled and remote installed plugins independent of the curated Git source policy.

## Testing

Added coverage for exact and shorthand Git allowlist entries, host patterns, blocked and invalid rules, curated catalog variants, plugin skills, startup sync, and remote installed plugins.

GitOrigin-RevId: 04617acb4a93040c70a13759eb4ce872877ba211
@copyberry
copyberry Bot force-pushed the copyberry/codex-internal-to-codex-oss/04617acb4a93040c70a13759eb4ce872877ba211 branch from 01e9264 to 633ab19 Compare September 1, 2026 01:38
@copyberry
copyberry Bot merged commit 633ab19 into main Sep 1, 2026
26 of 32 checks passed
@copyberry
copyberry Bot deleted the copyberry/codex-internal-to-codex-oss/04617acb4a93040c70a13759eb4ce872877ba211 branch September 1, 2026 01:39
@github-actions github-actions Bot locked and limited conversation to collaborators Sep 1, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.