aboutcode-org / aboutcode-org/vulnerablecode-data

We should avoid huge file tree path structure

Ouverte
#4 0 commentaires 0 réactions 0 personnes assignées Voir sur GitHub
Langage dominant
Aucune donnée de langage
Étoiles
2
Forks
1
Métriques de merge des PR
Aucune PR mergée en 30 j

Description

file structure Look like this: https://github.com/aboutcode-org/federatedcode/issues/3

```
vulnerablecode-data/aboutcode-vulnerabilities/1a/VCID-1aqn-grcz-ykgu.yml
vulnerablecode-data/aaboutcode-packages-alpine-0/alpine/apr/VCID-g3j9-zdd6-aaad.yaml
vulnerablecode-data/aaboutcode-packages-alpine-0/alpine/apr/alpine-advancecomp.yaml

Currently, the repository size is less than 300MB as it is just a sample. However, we plan to store millions of files in the future.
```
GitHub Team's Response to the Bug in Pull Request #3:

you are noticing is due to the huge file tree path in PR which affects only that specific PR and as such it does not present a denial of service vulnerability.

For this, we would recommend you distribute the directories into no more that a few thousand files/subdirectories in a given directory to avoid scenarios like such.

I will share the entire report with you from GitHub after the disclosure.

Guide de contribution

Aucun guide de contribution indexé pour ce dépôt

Évaluation

Cette issue n'a pas encore été évaluée.

Recevez les nouvelles issues par e-mail

Un résumé court des issues GitHub adaptées aux débutants.