Resolve plugins dynamically for ls-rules

private/buf/bufworkspace/workspace_provider.go

@@ -184,10 +184,9 @@ func (w *workspaceProvider) GetWorkspaceForModuleKey(
 		}
 		if bufYAMLFile.FileVersion() == bufconfig.FileVersionV2 {
 			pluginConfigs = bufYAMLFile.PluginConfigs()
-			// To support remote plugins in the override, we need to
-			// resolve the remote Refs to PluginKeys. A buf.lock file
-			// is not expected to be present so we require the
-			// pluginKeyProvider to resolve these PluginKeys.
+			// To support remote plugins in the override, we need to resolve the remote
+			// Refs to PluginKeys. A buf.lock file is not required for this operation.
+			// We use the BSR to resolve any remote plugin Refs.
 			remotePluginRefs := slicesext.Filter(
 				slicesext.Map(pluginConfigs, func(pluginConfig bufconfig.PluginConfig) bufparse.Ref {
 					return pluginConfig.Ref()

private/buf/cmd/buf/command/config/internal/internal.go

@@ -195,9 +195,20 @@ func lsRun(
 	defer func() {
 		retErr = errors.Join(retErr, wasmRuntime.Close(ctx))
 	}()
+	// To support remote plugins in the override, we need to resolve the remote
+	// Refs to PluginKeys. A buf.lock file is not required for this operation.
+	// We use the BSR to resolve any remote plugin Refs.
+	pluginKeyProvider, err := bufcli.NewPluginKeyProvider(container)
+	if err != nil {
+		return err
+	}
+	pluginDataProvider, err := bufcli.NewPluginDataProvider(container)
+	if err != nil {
+		return err
+	}
 	client, err := bufcheck.NewClient(
 		container.Logger(),
-		bufcheck.NewLocalRunnerProvider(wasmRuntime, bufplugin.NopPluginKeyProvider, bufplugin.NopPluginDataProvider),
+		bufcheck.NewLocalRunnerProvider(wasmRuntime, pluginKeyProvider, pluginDataProvider),
 		bufcheck.ClientWithStderr(container.Stderr()),
 	)
 	if err != nil {