Add Arm enablement workflow and Codex skill

[ranimandepudi]

Summary

Adds a reusable Arm enablement workflow for OSS repositories in VS Code and Codex.

The Codex integration is packaged as an arm-enablement skill. It uses the Arm MCP Server to assess source, builds, dependencies, CI, and container supply chains, then creates evidence-backed arm-enablement-report.md and arm-enablement-report.pdf artifacts. Report-only mode is the default; fixes and commits require explicit user requests.

What changed

• Add the VS Code chat integration for Arm readiness assessments.
• Add the Codex arm-enablement skill with agents/openai.yaml interface metadata.
• Keep Arm MCP setup manual because the skill dependency schema cannot express the required Docker image, arguments, and workspace mount.
• Document Codex skill installation, discovery with /skills, invocation with $arm-enablement, and the /workspace mount requirement.
• Handle unsupported scanner languages explicitly instead of substituting an unrelated scanner.
• Scope knowledge-base searches to decisions that affect the verdict and treat an empty result as no evidence.
• Use local /workspace scans for changed checkouts and reserve git_repo for an initial remote report-only scan.
• Inspect digest pins as manifest lists or single-platform images instead of assuming multi-architecture support.
• Keep report-only runs limited to the Markdown and PDF artifacts, with no automatic commits.
• Record MCP arguments, purpose, result, and measured client-observed duration in readable three-column report tables.

Validation

• The Codex skill passes the official skill validator, YAML parsing, frontmatter, tool-list, and whitespace checks.
• A fresh end-to-end Codex 0.144.2 run loaded $arm-enablement from $HOME/.agents/skills, connected through the documented manual Arm MCP configuration, and assessed pinned etcd-io/bbolt commit fa7ad3a72579c8766a84f7e765a4a9de997e0cf6 in report-only mode.
• The run generated only arm-enablement-report.md and arm-enablement-report.pdf. The final PDF is 11 pages; every page was rendered and checked for clipping, overlap, blank pages, duplicate titles, table readability, and pagination.
• On a native AWS aarch64 Ubuntu host, armlimited/arm-mcp:latest resolved to Arm64 digest sha256:d40b728c7f060915879bbd64a7ff25bf2ba77e44876f19775c21e8d25b681b76. Arm MCP Server 3.4.4 exposed all seven expected tools, and the Go scan completed with return code 0 and zero findings.
• bbolt built and executed with Go 1.25.12 on native linux/arm64. Its documented short test matrix and short race matrix passed for both freelist implementations. The temporary AWS checkout was clean after removing the MCP invocation-log sidecar.

CI

• integration-tests (ubuntu-24.04, linux/amd64) passed on commit 3704576.
• integration-tests (ubuntu-24.04-arm, linux/arm64) passed on commit 3704576.

[brikin01]

Thanks for putting this together—I left a few comments, though some are minor, so please use your best judgment. I’m not an expert in this type of analysis, so happy to be corrected if I’ve misunderstood anything

[brikin01]

Custom prompt files are now deprecated for Codex and are not invokable in more recent versions of Codex CLI. Can we convert this into a skill file?

[ranimandepudi]

Agreed and I converted the legacy codex custom prompt into an arm-enablement skill with SKILL.md and agents/openai.yaml, including the arm mcp dependency. I also added installation and invocation guidance. I tested the skill with Codex 0.144.2 against bbolt and generated both report and artifacts successfully.

[Copilot]

Pull request overview

Adds an Arm enablement integration across VS Code prompts and Codex skills so users can run an Arm MCP–backed readiness assessment and generate reproducible Markdown/PDF reports with an explicit “report-only by default” posture.

Changes:

• Introduces a new VS Code chat prompt (/arm-enablement) that guides Arm MCP scanning, evidence capture, and report/PDF generation.
• Adds a Codex arm-enablement skill (SKILL.md + agents/openai.yaml) that formalizes scope, scanning, container verification, and reporting expectations.
• Documents Codex skill installation and invocation steps in the Arm MCP installation guide.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 2 comments.

File	Description
agent-integrations/vs-code/arm-enablement.prompt.md	New VS Code prompt to drive Arm readiness assessment and produce Markdown/PDF artifacts.
agent-integrations/codex/arm-enablement/SKILL.md	New Codex skill instructions defining workflow, evidence requirements, and PDF export guidance.
agent-integrations/codex/arm-enablement/agents/openai.yaml	Codex agent metadata + dependency declaration for the Arm MCP server.
agent-integrations/agent-install-instructions.md	Adds steps to install/discover/invoke the new Codex skill.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[brikin01]

Thanks for all the changes, looking really good! I just added a few more comments, most important one is about the MCP dependency block (I think we can just delete). The others (along with the comments Copilot generated) are fairly minor, feel free to treat those as non-blocking if you think they're not necessary.

Also don't worry about the failing integration test, it is unrelated to your change and I am fixing that in a separate PR.

[ranimandepudi]

Addressed all the comments and made a fresh commit accordingly !! Thanks

[brikin01]

LGTM thanks for all the changes and for adding this into the repo!