[mraible]

Version bump for the already-listed external plugin crowdstrike-falcon-foundry, following the "Updating listed external plugins via PR" workflow in CONTRIBUTING.md.

Updates the entry in both plugins/external.json and .github/plugin/marketplace.json:

• version: 1.6.0 → 1.7.0
• source.ref: v1.6.0 → v1.7.0
• source.sha: 61572f38592d47c747e2595182459781bf0bc679 → 024c8b03f0e26b70c21cac492ca9cc7e4be7a564

The new ref and sha point to the published v1.7.0 release. Both the ref and sha are immutable. No other entries are modified.

[github-actions]

🔒 PR Risk Scan Results

Scanned 2 changed file(s).

Severity	Count
🔴 High	0
🟠 Medium	0
ℹ️ Info	0

✅ No matching risk patterns were detected in changed files.

This is an automated soft-gate report. Findings indicate review targets and do not block merge by themselves.

[github-actions]

🚦 Submission status: 👀 Ready for review

Risk tier: merge-risk:high — Privileged execution, automation, or review-policy change
Required to merge: passing submission-gate checks plus 1 approval from reviewers with write access, including a maintainer with admin or maintain permission.

Why this tier

• plugins/external.json is a high-risk path (automation, scripts, MCP config, hooks, or review policy)

Automated checks

Check	Status	Details
Line endings	✅ Passed	Passed · logs
Spelling	✅ Passed	Passed · logs
Generated README consistency	✅ Passed	Passed · logs
Plugin and extension validation	✅ Passed	Passed · logs
Plugin structure	✅ Passed	Passed · logs
Risk scan	✅ Passed	Passed · logs
Contributor reputation	✅ Passed	Passed · logs
Duplicate resource scan	✅ Passed	Passed · logs
PR quality signal	⏭️ Skipped	Skipped by its workflow · logs
Canvas/plugin smoke test	✅ Passed	Passed · logs

Review

• Approvals: 0/1
• Assigned reviewer: not assigned yet — comment /request-review to ask for one
• Review target date: not set
• Still needed: 1 more approval(s); an approval from a maintainer with admin or maintain permission
• The core-maintainers pool is not staffed yet; an approver with admin or maintain permission is required instead.

Commands

Command	Who	What it does
/rerun-checks	PR author, maintainers	Re-runs failed or incomplete checks and re-evaluates this gate
/request-review	PR author, maintainers	Asks the review rotation to assign a reviewer (adds needs-reviewer)

_{Updated for d1920cf · gate run · This comment is maintained automatically — see submission gate docs.}

[github-actions]

🟡 Contributor Reputation Check: MEDIUM risk

Check	Risk
Profile	MEDIUM
Credential audit	NONE

Maintainers: please review this contributor before merging.
See the workflow run for full details.
Automated check powered by AGT.

[github-actions]

✅ External plugin PR checks passed

• Changed entries detected: 1
• Workflow state label: ready-for-review
• Full logs: Download quality gate artifact
• Status legend: ✅ pass · ⚠️ warning · 🛑 fail

Per-plugin quality summary

Plugin	spec compliance	vally lint	install smoke test	version match	ref/sha consistency	canvas structure	overall	source tree
crowdstrike-falcon-foundry	✅ pass	✅ pass	✅ pass	✅ pass	✅ pass	⚪ not_run	✅ pass	024c8b03f0e26b70c21cac492ca9cc7e4be7a564

Gate output details

crowdstrike-falcon-foundry - spec compliance (✅ pass)

Agent Plugins v1.0.0 manifest checks passed for plugin.json.

crowdstrike-falcon-foundry - vally lint (✅ pass)

✅ ai-agents-development (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.
✅ api-integrations (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.
✅ app-audit (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.
✅ app-upgrades (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.
✅ collections-development (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.
✅ debugging-workflows (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.
✅ development-workflow (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-comp
...output truncated...

crowdstrike-falcon-foundry - install smoke test (✅ pass)

Install smoke test succeeded. Verified /tmp/external-plugin-quality-JAkvw8/copilot-home/.copilot/installed-plugins/external-plugin-intake/crowdstrike-falcon-foundry/plugin.json.

crowdstrike-falcon-foundry - version match (pass)

- v1.7.0: matched version "1.7.0" at "plugin.json".
- 024c8b03f0e26b70c21cac492ca9cc7e4be7a564: matched version "1.7.0" at "plugin.json".

crowdstrike-falcon-foundry - ref/sha consistency (pass)

source.ref "v1.7.0" resolves to the same commit as source.sha "024c8b03f0e26b70c21cac492ca9cc7e4be7a564".

crowdstrike-falcon-foundry - canvas structure (not_run)

Canvas structure gate skipped because plugin is not tagged with "canvas".

- crowdstrike-falcon-foundry: spec=pass, vally-lint=pass, install-smoke=pass, version-match=pass, ref-sha-consistency=pass, canvas-structure=not_run, overall=pass

[Copilot]

🔵 Needs a closer look

Approval should wait because SAML-blocked access prevented independent verification of the CrowdStrike v1.7.0 tag, pinned SHA, manifest version, and required quality gates.

No open issues 🎉

What changed in this PR

Updates the CrowdStrike Falcon Foundry external plugin from v1.6.0 to v1.7.0 and synchronizes its metadata across the repository.

Changes:

• Bumps the plugin version and source ref to v1.7.0.
• Updates the pinned source SHA to 024c8b03f0e26b70c21cac492ca9cc7e4be7a564.
• Synchronizes plugins/external.json with the marketplace catalog.
• The upstream v1.7.0 release and ref/SHA association require confirmation before merging.

File	Summary
plugins/​external.json	Updates the CrowdStrike plugin version, tag, and pinned commit SHA.
.github/​plugin/​marketplace.json	Synchronizes the marketplace entry with the updated external plugin metadata.

_{Review effort: Lite (auto)}