R2NorthstarTools / R2NorthstarTools/FlightCore
Add verification helper tool
Nobody has claimed this yet.
- Dominant language
- Rust
- Stars
- 94
- Forks
- 20
- PR merge metrics
- No merged PRs in 30d
Description
Add some logic to assist in mod verification (https://github.com/R2Northstar/VerifiedMods/)
In particular
- easily create diff to last verification if it exists (to allow for fast re-verification especially when there's only small changes)
- flag "dangerous" calls to native (in particular Safe I/O and SquirrelHTTP, while on it's own not dangerous at all, they can be used to add additional logic that is impossible to verify using solely automated static analysis and require the knowledge of a human reviewer to ensure safety)
Features
downloader
download version requested for verification
diff creation
- download last verified version
- extract
- git init
- git commit with some dummy user
- delete all files except
.gitfolder - download version requested for verification
- extract into same folder
- stage files without committing
- launch vscode to then easily see diff
"dangerous" keyword finder
simply do string search over the code and flag for certain keywords that would require additional scrutiny (SquirrelHTTP, SafeI/O, ...) or should be ban the mod entirely from verification (compilestring).
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
No files or tests are named. Start by locating FlightCore's Rust/Tauri entry points and reviewing how a verification helper could handle downloading and extracting versions, creating the requested Git diff, and scanning code for flagged keywords. Done means the requested version can be compared with the last verified version and dangerous or banned calls are clearly reported for review.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- git, rust, tauri, vscode
- Domain
- tooling
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100