Week_1 : Official Coding Begins - Progress Report

GSoC Projects Plugin Ecosystem Security
1

PROGRESS :
This week, I officially started Phase 1 of the implementation by building the new publish flow directly into the generator-joplin package. I successfully integrated the GitHub Device Flow authentication, focusing heavily on Developer Experience (DX) by adding cross-platform browser launching and secure local token caching.
I also finalized the payload generation logic, allowing the CLI to successfully submit the compiled plugin metadata as a structured Issue to our new plugins-test sandbox repository.

Adittionally, I mapped out how I can make a wrapper around the CI and tooling so that we can easily change tools in future for scanning instead of being locked to a single tool.

Next Week Scope

  • Submit PR 1: Finalize the code and open the first Pull Request for the CLI Submission Gateway on the generator-joplin repository.
  • Start Phase 2: Begin drafting the GitHub Actions workflow and the `Toolbase architecture for the automated security scanner inside theplugins-test` repository.

Problem Faced
This week was kind of smooth, I had all the working logic ready the only thing left was implementaton.

5 Likes