diff --git a/.github/plugin/marketplace.json b/.github/plugin/marketplace.json
index 585665bab9..0fe303268b 100644
--- a/.github/plugin/marketplace.json
+++ b/.github/plugin/marketplace.json
@@ -1389,8 +1389,8 @@
{
"name": "github-security",
"source": "plugins/github-security",
- "description": "GitHub Security canvas for Copilot. Review your session's changes for vulnerabilities and fix code scanning alerts.",
- "version": "0.2.1"
+ "description": "Review your session's changes for vulnerabilities and fix code scanning alerts",
+ "version": "0.2.2"
},
{
"name": "globestudio",
diff --git a/docs/README.plugins.md b/docs/README.plugins.md
index 49d74cb33f..848417f22d 100644
--- a/docs/README.plugins.md
+++ b/docs/README.plugins.md
@@ -74,7 +74,7 @@ See [CONTRIBUTING.md](../CONTRIBUTING.md#adding-plugins) for guidelines on how t
| [gem-team](../plugins/gem-team/README.md) | Self-Learning Multi-agent orchestration framework for spec-driven development and automated verification. With smarter tool calling and leaner context. | 14 items | multi-agent, orchestration, tdd, testing, e2e, devops, security-audit, code-review, prd, mobile |
| [gesture-review](../plugins/gesture-review/README.md) | Review pull requests with a live camera feed and approve or reject using thumbs-up/thumbs-down gestures. | 1 items | camera-input, gesture-control, github-prs, hands-free, mediapipe, pull-request-review |
| [git-worktree-explorer](../plugins/git-worktree-explorer/README.md) | Visualize the active Git repository through worktrees, branches, commits, and optional GitHub pull request context. | 1 items | branch-visualization, canvas, commit-history, git, repository-topology, worktrees |
-| [github-security](../plugins/github-security/README.md) | GitHub Security canvas for Copilot. Review your session's changes for vulnerabilities and fix code scanning alerts. | 1 items | security, code-scanning, canvas, ghas, alert, finding |
+| [github-security](../plugins/github-security/README.md) | Review your session's changes for vulnerabilities and fix code scanning alerts | 1 items | security, code-scanning, canvas, ghas, alert, finding |
| [globestudio](../plugins/globestudio/README.md) | Make dotted world maps and animated 3D globes and put them on a website. Bundles the globestudio skill, which writes the design as one config and embeds it as an iframe, a React component or a web component, with the hosted Globestudio MCP server for presets, share links and embed code. Free, MIT, no API key. | 1 items | globe, maps, dotted-map, 3d-globe, data-visualization, embed, react, web-component, mcp, design |
| [go-mcp-development](../plugins/go-mcp-development/README.md) | Complete toolkit for building Model Context Protocol (MCP) servers in Go using the official github.com/modelcontextprotocol/go-sdk. Includes instructions for best practices, a prompt for generating servers, and an expert chat mode for guidance. | 2 items | go, golang, mcp, model-context-protocol, server-development, sdk |
| [java-development](../plugins/java-development/README.md) | Comprehensive collection of prompts and instructions for Java development including Spring Boot, Quarkus, testing, documentation, and best practices. | 4 items | java, springboot, quarkus, jpa, junit, javadoc |
diff --git a/extensions/github-security/README.md b/extensions/github-security/README.md
index fb9c90bcba..bfa307cdd2 100644
--- a/extensions/github-security/README.md
+++ b/extensions/github-security/README.md
@@ -55,7 +55,7 @@ To keep the extension current, open the **Update all** menu on the **Plugins** t
## Agent tools
-The extension registers tools that Copilot can call during a session. Each call goes through Copilot's normal per-invocation approval, the extension never bypasses tool permission prompts.
+The extension registers tools that Copilot can call during a session. Each call goes through Copilot's normal per-invocation approval. The extension never bypasses tool permission prompts.
| Tool | What it does |
| --- | --- |
diff --git a/extensions/github-security/assets/preview.png b/extensions/github-security/assets/preview.png
index 072cf13df1..f1d1681ee7 100644
Binary files a/extensions/github-security/assets/preview.png and b/extensions/github-security/assets/preview.png differ
diff --git a/extensions/github-security/client/index.html b/extensions/github-security/client/index.html
index 9bddd86167..e4cbe4ed88 100644
--- a/extensions/github-security/client/index.html
+++ b/extensions/github-security/client/index.html
@@ -3,7 +3,7 @@
- Security
+ GitHub Security
diff --git a/extensions/github-security/extension.mjs b/extensions/github-security/extension.mjs
index 8842812f87..f1d83512cd 100644
--- a/extensions/github-security/extension.mjs
+++ b/extensions/github-security/extension.mjs
@@ -10572,13 +10572,13 @@ var session = await joinSession({
if (!repository) {
stateStore.setError(sessionInfo.repoResolutionErrorMessage ?? "Cannot load findings without a repository.");
return {
- title: "Security",
+ title: "GitHub Security",
url: url.toString()
};
}
if (stateStore.getFindingList("ghas-alerts") === null && !stateStore.getSnapshot().isGhasAuthUnsupported && !stateStore.getSnapshot().isGhasNotConfigured) loadGhasAlertsHandlingErrors(stateStore, repository);
return {
- title: "Security",
+ title: "GitHub Security",
url: url.toString()
};
},
diff --git a/extensions/github-security/manifest.json b/extensions/github-security/manifest.json
index 8d0d9698eb..3ddecca813 100644
--- a/extensions/github-security/manifest.json
+++ b/extensions/github-security/manifest.json
@@ -1,13 +1,21 @@
{
"id": "com.microsoft.github-security",
- "version": "0.2.1",
- "engines": { "github-app": "^0.2.0" },
+ "version": "0.2.2",
+ "engines": {
+ "github-app": "^0.2.0"
+ },
"activations": [
{
"id": "session",
"owner": "session",
- "entry": { "node": "./extension.mjs" },
- "authentication": { "resources": ["github"] }
+ "entry": {
+ "node": "./extension.mjs"
+ },
+ "authentication": {
+ "resources": [
+ "github"
+ ]
+ }
}
]
}
diff --git a/plugins/github-security/README.md b/plugins/github-security/README.md
index fb9c90bcba..bfa307cdd2 100644
--- a/plugins/github-security/README.md
+++ b/plugins/github-security/README.md
@@ -55,7 +55,7 @@ To keep the extension current, open the **Update all** menu on the **Plugins** t
## Agent tools
-The extension registers tools that Copilot can call during a session. Each call goes through Copilot's normal per-invocation approval, the extension never bypasses tool permission prompts.
+The extension registers tools that Copilot can call during a session. Each call goes through Copilot's normal per-invocation approval. The extension never bypasses tool permission prompts.
| Tool | What it does |
| --- | --- |
diff --git a/plugins/github-security/plugin.json b/plugins/github-security/plugin.json
index 57ac99ea49..8a705f0e2e 100644
--- a/plugins/github-security/plugin.json
+++ b/plugins/github-security/plugin.json
@@ -1,8 +1,8 @@
{
"$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
"name": "github-security",
- "version": "0.2.1",
- "description": "GitHub Security canvas for Copilot. Review your session's changes for vulnerabilities and fix code scanning alerts.",
+ "version": "0.2.2",
+ "description": "Review your session's changes for vulnerabilities and fix code scanning alerts",
"keywords": [
"security",
"code-scanning",