aboutcode-org / aboutcode-org/vulnerablecode-data
We should avoid huge file tree path structure
- Langage dominant
- Aucune donnée de langage
- Étoiles
- 2
- Forks
- 1
- Métriques de merge des PR
- Aucune PR mergée en 30 j
Description
file structure Look like this: https://github.com/aboutcode-org/federatedcode/issues/3
```
vulnerablecode-data/aboutcode-vulnerabilities/1a/VCID-1aqn-grcz-ykgu.yml
vulnerablecode-data/aaboutcode-packages-alpine-0/alpine/apr/VCID-g3j9-zdd6-aaad.yaml
vulnerablecode-data/aaboutcode-packages-alpine-0/alpine/apr/alpine-advancecomp.yaml
Currently, the repository size is less than 300MB as it is just a sample. However, we plan to store millions of files in the future.
```
GitHub Team's Response to the Bug in Pull Request #3:
you are noticing is due to the huge file tree path in PR which affects only that specific PR and as such it does not present a denial of service vulnerability.
For this, we would recommend you distribute the directories into no more that a few thousand files/subdirectories in a given directory to avoid scenarios like such.
I will share the entire report with you from GitHub after the disclosure.
Guide de contribution
Aucun guide de contribution indexé pour ce dépôt
Évaluation
Cette issue n'a pas encore été évaluée.