[mfreeman451]

The plugin directory still read the retired Forgejo catalog, and the manifest allowlist skipped plugin.local.yaml. Switch deployed catalog fetches to GitHub and discover local check manifests with config.local.schema.json, so both Starlink Cloud and Starlink Local Diagnostics appear with their published signing metadata.

Configure the existing authorized GitHub service credential, with surrounding whitespace removed, as namespace-scoped SealedSecrets for both portal overlays. Regular catalog refreshes exceed anonymous GitHub API limits. Pin production to sha-b4dbcf86c5a8, built from the catalog fix. The required precommit task also removed two unused lock entries.

Validation:

• Reproduced missing local variants before the fix with synthetic YAML and JSON manifests.
• mix precommit: 60 tests passed; compile and format passed.
• MIX_ENV=test mix credo --strict: no issues.
• Both Kubernetes overlays render, and both updated SealedSecrets pass controller validation.
• Authenticated GitHub preflight returns 15 plugins, including both signed Starlink variants and their distinct configuration schemas.
• GitHub Actions built and published sha-b4dbcf86c5a8 successfully; its Bazel tests passed.
• Production deployment is Healthy and Synced at merge commit d0a190534d377440285aefbcb991552c66b3ead9. Both replicas load 15 plugins and eight add-ons from GitHub. The public directory and both Starlink detail pages display the signed packages and correct schema links.

The Elixir Quality job passes compilation, formatting and Credo, then fails at mix hex.audit on 43 advisories across eight dependencies. Every affected lock entry is identical to main; this change does not alter those versions or suppress the audit. The downstream dependency audit and Sobelow steps therefore did not run. Dependency remediation remains outstanding.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
🔒 Security Review	✅ Completed 2026-10-21T05:08:01.315969Z	b4dbcf8	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.