This repository contains all the code for new plugin publishing workflow and custom made codeQl rules that will help in scanning the plugin.
The plugins get scanned with inbuilt CodeQl rules + Custom made codeQl rules. Some of the inbuilt rules are excluded due to their appearance in top 20 plugin. CodeQl will be used to evaluate plugins against these rules : RULES.md
Find the detailed plan in : PLAN.md
Install Node.js and the CodeQL CLI, then run:
cd scripts
npm install
npm run testThe test command runs the CodeQL regression tests in .github/codeql/tests.
| Name | Version | Description | Author | ||
|---|---|---|---|---|---|
| - | ⬇️ | joplin-plugin-ownership-name-lookup-test | 1.0.0 | Registry-only fixture for testing ownership lookup by plugin name. | tester |
| - | ⬇️ | Legacy NPM Migration Registry Fixture | 1.0.0 | Registry-only fixture for testing migration from legacy NPM publishing. | tester |
| 🏠 | ⬇️ | Normal Plugin test flow | 1.0.1 | This is the test for the happy path for the plugin publish | tester |
| - | ⬇️ | Ownership By ID Registry Fixture | 1.0.0 | Registry-only fixture for rejecting an existing plugin ID submitted from a different repository. | tester |
| 🏠 | ⬇️ | Ownership By Name Submission Test | 1.0.0 | Submission fixture whose package name matches an existing registry entry from another repository. | tester |
| 🏠 | ⬇️ | Submit Flow Test | 1.0.5 | A simple plugin for testing the complete Joplin plugin submission flow. | Akshaj Rawat |