Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
64 changes: 64 additions & 0 deletions .github/workflows/weekly-security-maintenance.yml
Original file line number Diff line number Diff line change
Expand Up @@ -196,3 +196,67 @@ jobs:
if ($unpinnedCount -eq '0' -and $staleCount -eq '0') {
Write-Output "::notice::All dependencies are properly pinned and up-to-date!"
}
- name: Create or Update Staleness Issue
if: always()
uses: actions/github-script@v7
with:
script: |
const staleCount = Number('${{ needs.check-staleness.outputs.stale-count }}');
const threshold = Number('${{ inputs.max-age-days || 30 }}');

const issueTitle = "Security: Stale dependency SHAs detected";

const { data: issues } = await github.rest.issues.listForRepo({
owner: context.repo.owner,
repo: context.repo.repo,
state: "open"
});

const existingIssue = issues.find(i => i.title === issueTitle);

if (staleCount > 0) {

const body = `
## Stale GitHub Action SHAs Detected

${staleCount} dependencies have SHA pins older than ${threshold} days.

Please run:

\`\`\`powershell
npm run sha-staleness
\`\`\`

Then update outdated SHAs using:

\`\`\`powershell
scripts/security/Update-ActionSHAPinning.ps1 -Path .github/workflows -UpdateStale
\`\`\`
`;

if (existingIssue) {
await github.rest.issues.update({
owner: context.repo.owner,
repo: context.repo.repo,
issue_number: existingIssue.number,
body: body
});
} else {
await github.rest.issues.create({
owner: context.repo.owner,
repo: context.repo.repo,
title: issueTitle,
body: body
});
}

} else if (existingIssue) {

await github.rest.issues.update({
owner: context.repo.owner,
repo: context.repo.repo,
issue_number: existingIssue.number,
state: "closed"
});

}
7 changes: 7 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -45,6 +45,13 @@ Install the VS Code extension from the Marketplace:

Need a different installation method? See the [Installation Guide](docs/getting-started/install.md) for CLI plugins, submodules, multi-root workspaces, and more.

### Browse Extension Collections

Explore all available extension bundles and choose the one that fits your workflow.

See the full collections overview:
[Browse Extension Collections](https://microsoft.github.io/hve-core/docs/getting-started/collections)

### 2. Verify

Open GitHub Copilot Chat (`Ctrl+Alt+I`) and check that HVE Core agents appear in the agent picker. Look for **task-researcher**, **task-planner**, and **rpi-agent**.
Expand Down
37 changes: 37 additions & 0 deletions docs/docusaurus/src/components/Icons/index.tsx
Original file line number Diff line number Diff line change
Expand Up @@ -86,6 +86,43 @@ export function DesignThinkingIcon({ className }: { className?: string }) {
);
}

export function VsCodeExtensionIcon ({className}:{className?:string}){
return(
<svg viewBox='0 0 64 64' className={className} aria-hidden = "true">
<defs>
<linearGradient id = "vscodeGrad" x1 = '0' y1 = '0' x2='1' y2='1'>
<stop offset="0%" stopColor='#29b6f6'></stop>
<stop offset="35%" stopColor='#1a9fd8'></stop>
<stop offset="70%" stopColor='#0d84c0'></stop>
<stop offset="100" stopColor='#0078d4'></stop>
</linearGradient>
</defs>
<path d = "M46 6L22 22l-10-8-6 6 10 8-10 8 6 6 10-8 24 16z" fill='url(#vscodeGrad)'>
</path>
<line
x1="40"
y1="18"
x2="40"
y2="38"
stroke="#ffffff"
strokeWidth="2"
strokeLinecap='round'

/>
<line
x1="34"
y1="22"
x2="34"
y2="34"
stroke="#ffffff"
strokeWidth="2"
strokeLinecap='round'

/>
</svg>
)
}

export function TemplatesExamplesIcon({ className }: { className?: string }) {
return (
<svg viewBox="0 0 64 64" className={className} aria-hidden="true">
Expand Down
11 changes: 11 additions & 0 deletions docs/docusaurus/src/data/hubCards.tsx
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,7 @@ import {
WorkflowsIcon,
DesignThinkingIcon,
TemplatesExamplesIcon,
VsCodeExtensionIcon
} from '../components/Icons';

export interface IconCardData {
Expand All @@ -31,6 +32,16 @@ export const iconCards: IconCardData[] = [
href: '/docs/category/getting-started',
description: 'Install, configure, and run your first AI-assisted workflow',
},

{
icon:<VsCodeExtensionIcon/>,
supertitle : 'Install',
title :'VS Code Extension',
href : 'https://marketplace.visualstudio.com/items?itemName=ise-hve-essentials.hve-core',
description: 'Install the HVE Core extension from the VS Code Marketplace',

},

{
icon: <DesignThinkingIcon />,
supertitle: 'HVE Guide',
Expand Down
3 changes: 3 additions & 0 deletions docs/getting-started/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -42,6 +42,9 @@ methods, or install the
[VS Code extension](https://marketplace.visualstudio.com/items?itemName=ise-hve-essentials.hve-core)
for the quickest path.

Not sure which bundle of agents you need?
Browse the available [Extension Collections](collections.md) to see curated sets of HVE capabilities.

## Troubleshooting

### Installation Issues
Expand Down
29 changes: 29 additions & 0 deletions docs/getting-started/collections.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,29 @@
---
title: Extension Collections
description: Overview of all HVE extension collections available in the VS Code Marketplace
sidebar_position: 3
author: pratik wayase
ms.date: 2026-03-07
ms.topic: conceptual
---

## HVE Extension Collections

HVE provides multiple extension collections that bundle agents, prompts, instructions, and skills for specific workflows.

## Collections Overview

| Collection | Description | Agents | Prompts | Instructions | Skills | Marketplace |
|-------------------|-----------------------------------------|--------|---------|--------------|--------|---------------------------------------------------------------------------------------------------------|
| HVE Core All | Complete bundle of all stable artifacts | 35 | 41 | 68 | 2 | [Install](https://marketplace.visualstudio.com/items?itemName=ise-hve-essentials.hve-core-all) |
| HVE Core | RPI workflow + Git prompts | 17 | 15 | 7 | 1 | [Install](https://marketplace.visualstudio.com/items?itemName=ise-hve-essentials.hve-core) |
| Azure DevOps | Work items, builds, PRs | 1 | 5 | 6 | 1 | [Coming soon](https://marketplace.visualstudio.com/items?itemName=ise-hve-essentials.ado) |
| GitHub | Issue discovery and sprint planning | 1 | 5 | 6 | N/A | [Coming soon](https://marketplace.visualstudio.com/items?itemName=ise-hve-essentials.github) |
| Coding Standards | Language conventions | N/A | N/A | 10 | N/A | [Coming soon](https://marketplace.visualstudio.com/items?itemName=ise-hve-essentials.coding-standards) |
| Data Science | Jupyter + data specs | 4 | N/A | 3 | N/A | [Coming soon](https://marketplace.visualstudio.com/items?itemName=ise-hve-essentials.data-science) |
| Project Planning | ADRs, PRDs, architecture diagrams | 14 | N/A | 1 | N/A | [Coming soon](https://marketplace.visualstudio.com/items?itemName=ise-hve-essentials.project-planning) |
| Design Thinking | Design thinking coaching system | 2 | 13 | 43 | N/A | [Coming soon](https://marketplace.visualstudio.com/items?itemName=ise-hve-essentials.design-thinking) |
| Security Planning | Threat modeling and incident response | 1 | 2 | 1 | N/A | [Coming soon](https://marketplace.visualstudio.com/items?itemName=ise-hve-essentials.security-planning) |
| Installer | Interactive HVE installer | 1 | N/A | 1 | N/A | [Coming soon](https://marketplace.visualstudio.com/items?itemName=ise-hve-essentials.installer) |
| Code Review | Code review automation | 1 | 1 | 1 | N/A | [Coming soon](https://marketplace.visualstudio.com/items?itemName=ise-hve-essentials.code-review) |
| Experimental | Preview artifacts | N/A | N/A | 1 | 1 | [Coming soon](https://marketplace.visualstudio.com/items?itemName=ise-hve-essentials.experimental) |
4 changes: 4 additions & 0 deletions docs/getting-started/install.md
Original file line number Diff line number Diff line change
Expand Up @@ -16,6 +16,10 @@ estimated_reading_time: 5

HVE-Core provides GitHub Copilot customizations (custom agents, instructions, and prompts) that enhance your development workflow. This guide helps you choose the right installation method for your environment.

Before installing, you can browse all available collections here:

[View Extension Collections](./collections.md)

## Recommended: VS Code Extension ⭐

**For most users**, the simplest method is to install directly from the VS Code Marketplace:
Expand Down
8 changes: 8 additions & 0 deletions extension/templates/README.template.md
Original file line number Diff line number Diff line change
Expand Up @@ -22,6 +22,14 @@ After installing this extension, the chat agents are available in GitHub Copilot

Some chat agents create workflow artifacts in your project directory. See the [installation guide](https://github.com/microsoft/hve-core/blob/main/docs/getting-started/install.md#post-installation-update-your-gitignore) for recommended `.gitignore` configuration and other setup details.

## Browse All Collections

This extension is part of the HVE ecosystem.

See the full list of available collections and capabilities:

[Browse Extension Collections](https://microsoft.github.io/hve-core/docs/getting-started/collections)

## Pre-release Channel

HVE Core offers two installation channels:
Expand Down