Extensions

Extensions make the Thirdpass CLI ecosystem-aware.

The CLI owns the review and check workflows. Extensions own the registry and package details for the ecosystems they support.

What Extensions Do

An extension can:

• Identify dependency files for its ecosystem.
• Resolve dependency names and versions.
• Retrieve package archives from a registry.
• Tell the CLI which files should be skipped for review.

Discovery

The CLI discovers supported extension binaries from PATH. It can also use the configured extension directory for local and development builds.

Thirdpass only enables known supported extension names, so installing an arbitrary binary does not automatically make it part of the review workflow.

Installation

Install extension binaries with the package manager for that extension. For Rust-based extensions, use Cargo:

cargo install thirdpass-ansible

Then confirm the CLI can see the extension:

thirdpass extension list