aboutcode-org / aboutcode-org/vulnerablecode

Ignore duplicate commit URLs from forked repositories

Aperta
#2,361 0 commenti 0 reazioni 0 assegnatari Vedi su GitHub
Lingua principale
Python
Stelle
702
Fork
328
Merge medio
3g 8h
PR unite (30g)
3

Descrizione

Some vulnerabilities contain multiple `commit_url` entries that reference the same commit hash in different repositories.

For example:
https://github.com/pypa/advisory-database/blob/main/vulns/requests/PYSEC-2015-17.yaml
https://public.vulnerablecode.io/advisories/pypa/requests/PYSEC-2015-17

The advisory contains the following commit URLs:

* https://github.com/kennethreitz/requests/commit/3bd8afbff29e50b38f889b2f688785a669b9aafc
* https://github.com/psf/requests/commit/3bd8afbff29e50b38f889b2f688785a669b9aafc

Both URLs point to the same Git commit (`3bd8afbff29e50b38f889b2f688785a669b9aafc`). The `kennethreitz/requests` repository is forked repository, while `psf/requests` is the current original repository.

To avoid duplicate patch commits, we should ignore commit URLs from forked repositories when the same commit is available in the original repository

Guida per i contributori

Nessuna guida per i contributori indicizzata per questo repository

Valutazione

Questa issue non è ancora stata valutata.

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.