Add security-review v1.1.1 to community extensions catalog by DyanGalih · Pull Request #2073 · github/spec-kit

DyanGalih · 2026-04-03T03:40:34Z

This PR adds Security Review v1.1.1 to the community extensions catalog and the root README community extensions table.

The branch includes follow-up metadata and formatting adjustments made during review.

For Security Review metadata, author is set to DyanGalih to match the repository maintainer.

This is a community extension and is independently maintained; this PR does not imply endorsement.

Ready for review.

Copilot

Pull request overview

Adds the “Security Review” community extension (v1.1.0) to Spec Kit’s community extension catalog and lists it in the root README, along with markdown/table formatting normalization in the README and JSON formatting normalization in the community catalog.

Changes:

Added the Security Review extension entry (v1.1.0) to extensions/catalog.community.json.
Added Security Review to the Community Extensions table in README.md.
Normalized formatting of markdown tables/emphasis in README.md and compacted some JSON arrays/spacing in extensions/catalog.community.json.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

File	Description
README.md	Adds Security Review to the community extensions list and reformats multiple markdown tables/emphasis for consistency.
extensions/catalog.community.json	Adds the Security Review v1.1.0 catalog entry and applies formatting/compactness tweaks to various entries.

Comments suppressed due to low confidence (1)

extensions/catalog.community.json:874

Typo in the Repository Index description: "architecuture" should be "architecture".

      "id": "repoindex",
      "description": "Generate index of your repo for overview, architecuture and module",
      "author": "Yiyu Liu",

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

extensions/catalog.community.json

Copilot

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

extensions/catalog.community.json

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Copilot

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated no new comments.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copilot

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

Comments suppressed due to low confidence (1)

extensions/catalog.community.json:874

Typo in the repoindex description: "architecuture" should be "architecture".

      "name": "Repository Index",
      "id": "repoindex",
      "description": "Generate index of your repo for overview, architecuture and module",
      "author": "Yiyu Liu",

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

README.md

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Copilot

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated 5 comments.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

README.md

extensions/catalog.community.json

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Copilot

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

extensions/catalog.community.json

Copilot

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

extensions/catalog.community.json

This reverts commit 32e7471.

Copilot

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated no new comments.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

mnriem

For the table please do not reformat as it makes it unclear what changed

Copilot

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated no new comments.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

DyanGalih · 2026-04-04T00:13:36Z

For the table please do not reformat as it makes it unclear what changed

done

Copilot

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

Comments suppressed due to low confidence (1)

README.md:225

The Community Extensions table should remain alphabetical per the Extension Publishing Guide (extensions/EXTENSION-PUBLISHING-GUIDE.md:228). In the S-section, the rows after “Security Review” are currently out of order (e.g., “Ship Release Extension” / “Spec …” entries appear after “Staff Review Extension” / “Superpowers Bridge”). Please reorder these rows to restore alphabetical ordering by extension name.

| Security Review | Comprehensive security audit of codebases using AI-powered DevSecOps analysis | `code` | Read-only | [spec-kit-security-review](https://github.com/DyanGalih/spec-kit-security-review) |
| Staff Review Extension | Staff-engineer-level code review that validates implementation against spec, checks security, performance, and test coverage | `code` | Read-only | [spec-kit-staff-review](https://github.com/arunt14/spec-kit-staff-review) |
| Superpowers Bridge | Orchestrates obra/superpowers skills within the spec-kit SDD workflow across the full lifecycle (clarification, TDD, review, verification, critique, debugging, branch completion) | `process` | Read+Write | [superpowers-bridge](https://github.com/RbBtSn0w/spec-kit-extensions/tree/main/superpowers-bridge) |
| Ship Release Extension | Automates release pipeline: pre-flight checks, branch sync, changelog generation, CI verification, and PR creation | `process` | Read+Write | [spec-kit-ship](https://github.com/arunt14/spec-kit-ship) |
| Spec Critique Extension | Dual-lens critical review of spec and plan from product strategy and engineering risk perspectives | `docs` | Read-only | [spec-kit-critique](https://github.com/arunt14/spec-kit-critique) |
| Spec Sync | Detect and resolve drift between specs and implementation. AI-assisted resolution with human approval | `docs` | Read+Write | [spec-kit-sync](https://github.com/bgervin/spec-kit-sync) |

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copilot · 2026-04-04T00:19:44Z

extensions/catalog.community.json

@@ -975,7 +975,7 @@
    "repoindex":{


While touching the repoindex entry, its key formatting is inconsistent with the rest of this JSON (it’s the only key written as "repoindex":{ without a space). Consider changing it to "repoindex": { for consistent formatting and easier diffs.

Suggested change

"repoindex":{

"repoindex": {

DyanGalih added 2 commits April 3, 2026 03:30

Add security-review v1.1.0 to community catalog

334af84

Format README and community catalog entries

32e7471

DyanGalih requested a review from mnriem as a code owner April 3, 2026 03:40

Copilot AI review requested due to automatic review settings April 3, 2026 03:40

Copilot started reviewing on behalf of DyanGalih April 3, 2026 03:41 View session

Copilot AI reviewed Apr 3, 2026

View reviewed changes

extensions/catalog.community.json Outdated Show resolved Hide resolved

Set security-review author to DyanGalih

bcd41fb

DyanGalih requested a review from Copilot April 3, 2026 03:58

Copilot started reviewing on behalf of DyanGalih April 3, 2026 03:59 View session

Copilot AI reviewed Apr 3, 2026

View reviewed changes

extensions/catalog.community.json Outdated Show resolved Hide resolved

Update extensions/catalog.community.json

bc78c4a

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Copilot AI review requested due to automatic review settings April 3, 2026 04:05

Copilot started reviewing on behalf of DyanGalih April 3, 2026 04:06 View session

Copilot AI reviewed Apr 3, 2026

View reviewed changes

Bump security-review to v1.1.1

945ac4f

DyanGalih changed the title ~~Add security-review v1.1.0 to community extensions catalog~~ Add security-review v1.1.1 to community extensions catalog Apr 3, 2026

DyanGalih requested a review from Copilot April 3, 2026 04:36

Copilot started reviewing on behalf of DyanGalih April 3, 2026 04:36 View session

Copilot AI reviewed Apr 3, 2026

View reviewed changes

README.md Outdated Show resolved Hide resolved

Update README.md

1eb8c75

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Copilot AI review requested due to automatic review settings April 3, 2026 04:42

Copilot started reviewing on behalf of DyanGalih April 3, 2026 04:42 View session

Copilot AI reviewed Apr 3, 2026

View reviewed changes

README.md Outdated Show resolved Hide resolved

README.md Outdated Show resolved Hide resolved

README.md Outdated Show resolved Hide resolved

README.md Outdated Show resolved Hide resolved

extensions/catalog.community.json Outdated Show resolved Hide resolved

Update README.md

bfb6f11

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Copilot AI review requested due to automatic review settings April 3, 2026 04:57

Update README.md

c670045

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Copilot started reviewing on behalf of DyanGalih April 3, 2026 04:58 View session

Fix linting: use asterisk emphasis, fix architecuture typo

36d137f

Copilot AI reviewed Apr 3, 2026

View reviewed changes

extensions/catalog.community.json Show resolved Hide resolved

DyanGalih requested a review from Copilot April 3, 2026 06:35

Copilot started reviewing on behalf of DyanGalih April 3, 2026 06:36 View session

Copilot AI reviewed Apr 3, 2026

View reviewed changes

extensions/catalog.community.json Outdated Show resolved Hide resolved

Revert "Format README and community catalog entries"

a2b0a0d

This reverts commit 32e7471.

DyanGalih requested a review from Copilot April 3, 2026 06:58

Copilot started reviewing on behalf of DyanGalih April 3, 2026 06:59 View session

Copilot AI reviewed Apr 3, 2026

View reviewed changes

mnriem requested changes Apr 3, 2026

View reviewed changes

mnriem requested a review from Copilot April 3, 2026 12:25

Copilot started reviewing on behalf of mnriem April 3, 2026 12:25 View session

Copilot AI reviewed Apr 3, 2026

View reviewed changes

Restore README table to upstream format

b4be5f5

DyanGalih requested a review from mnriem April 4, 2026 00:13

Merge upstream/main and resolve catalog conflict

9c9b248

Copilot AI review requested due to automatic review settings April 4, 2026 00:17

Copilot started reviewing on behalf of DyanGalih April 4, 2026 00:17 View session

Copilot AI reviewed Apr 4, 2026

View reviewed changes

Conversation

DyanGalih commented Apr 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

mnriem left a comment

Choose a reason for hiding this comment

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

DyanGalih commented Apr 4, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Copilot AI Apr 4, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

DyanGalih commented Apr 3, 2026 •

edited

Loading