Skip to content

Releases: duclucky/omarchy-plugin-ci

Release list

Omarchy Plugin CI v0.1.0-beta.1

Omarchy Plugin CI v0.1.0-beta.1 Pre-release
Pre-release

Choose a tag to compare

View all tags
@duclucky duclucky released this 23 Aug 18:17
v0.1.0-beta.1
d1fc1fe

The first public beta turns the Omarchy Quattro plugin contract into repeatable GitHub Actions evidence.

What ships

  • Composite GitHub Action with contents: read permissions
  • Dependency-free Node.js 20+ CLI
  • Source-backed omarchy-quattro-plugin-v1 contract snapshot
  • Manifest, ID namespace, kind, entry-point, and path-escape validation
  • Structural QML root and summon lifecycle checks
  • Bounded capability findings with file and line evidence
  • Isolated install, enable, disable, remove, and source-integrity simulation
  • JSON, Markdown, GitHub Job Summary, and Action outputs
  • Valid, invalid, risky, and symlink-escape fixtures

Verified by GitHub Actions

  • Ubuntu suite: 8/8 tests passed
  • Arch Linux container suite: 8/8 tests passed
  • Symlink escape and non-disclosure test passed on both Linux environments
  • The repository dogfooded its own Action and produced level 3/3
  • The clean package was extracted and rerun successfully

View the tag CI run

Use the Action

- uses: actions/checkout@v7
- uses: actions/setup-node@v7
  with:
    node-version: 24
- uses: duclucky/omarchy-plugin-ci@v0.1.0-beta.1

Evidence boundary

Level 3 proves the pinned manifest, structural QML, and isolated configuration lifecycle checks passed. It does not execute plugin code, render a real Quickshell session, test hardware integration, or certify that a plugin is secure. Capability matches are warnings for human review.

Verify the downloadable package with the attached SHA-256 file before extraction.

Loading