aboutcode-org / aboutcode-org/vulnerablecode-data
We should avoid huge file tree path structure
- 主要语言
- 没有语言数据
- 星标
- 2
- 派生
- 1
- PR 合并指标
- 30 天内没有已合并 PR
描述
file structure Look like this: https://github.com/aboutcode-org/federatedcode/issues/3
```
vulnerablecode-data/aboutcode-vulnerabilities/1a/VCID-1aqn-grcz-ykgu.yml
vulnerablecode-data/aaboutcode-packages-alpine-0/alpine/apr/VCID-g3j9-zdd6-aaad.yaml
vulnerablecode-data/aaboutcode-packages-alpine-0/alpine/apr/alpine-advancecomp.yaml
Currently, the repository size is less than 300MB as it is just a sample. However, we plan to store millions of files in the future.
```
GitHub Team's Response to the Bug in Pull Request #3:
you are noticing is due to the huge file tree path in PR which affects only that specific PR and as such it does not present a denial of service vulnerability.
For this, we would recommend you distribute the directories into no more that a few thousand files/subdirectories in a given directory to avoid scenarios like such.
I will share the entire report with you from GitHub after the disclosure.
贡献指南
这个仓库没有索引到贡献指南
评估
这个 Issue 还没有评估数据。