[github-actions]

Summary

• add megalinter in plugins/external.json
• regenerate marketplace outputs for the approved external plugin submission
• source repository: oxsecurity/megalinter
• approved from [External Plugin]: megalinter #2773

Validation

• npm run build

[github-actions]

🚦 Submission status: ⏳ Awaiting automation

Risk tier: merge-risk:high — Privileged execution, automation, or review-policy change
Required to merge: passing submission-gate checks plus 1 approval from reviewers with write access, including a maintainer with admin or maintain permission.

Why this tier

• plugins/external.json is a high-risk path (automation, scripts, MCP config, hooks, or review policy)

Automated checks

Check	Status	Details
Line endings	✅ Passed	Passed · logs
Spelling	⏳ Pending	Running · logs
Generated README consistency	⏳ Pending	Running · logs
Plugin and extension validation	⏳ Pending	Running · logs
Plugin structure	✅ Passed	Passed · logs
Risk scan	✅ Passed	Passed · logs
Contributor reputation	⏭️ Skipped	Skipped by its workflow · logs
Duplicate resource scan	✅ Passed	Passed · logs
PR quality signal	✅ Passed	Passed · logs
Canvas/plugin smoke test	✅ Passed	Passed · logs

Review

• Approvals: 1/1 (aaronpowell)
• Assigned reviewer: not assigned yet — comment /request-review to ask for one
• Review target date: not set
• The core-maintainers pool is not staffed yet; an approver with admin or maintain permission is required instead.

Commands

Command	Who	What it does
/rerun-checks	PR author, maintainers	Re-runs failed or incomplete checks and re-evaluates this gate
/request-review	PR author, maintainers	Asks the review rotation to assign a reviewer (adds needs-reviewer)

_{Updated for 7f22257 · gate run · This comment is maintained automatically — see submission gate docs.}

[aaronpowell]

LGTM — matches approval on #2773, pinned to e96b2d6, metadata matches upstream v1.0.3. Approving pending workflow runs; will merge once green.

[aaronpowell]

/rerun-checks

[github-actions]

🔁 /rerun-checks for 7f22257

Re-running: Label PR Intent, PR Duplicate Check, Canvas Smoke Test, Validate README.md, PR Risk Scan — Gate, PR Quality Signal Review, External Plugin PR Quality Gates, Check Spelling, Contributor Reputation Check, Validate Plugins and Extensions, Check Line Endings, Check Plugin Structure, Deploy preview website to GitHub Pages, Submission Gate.

The status comment updates when the checks finish.