digitalbazaar / digitalbazaar/github-workflow-shared-action-osv-scanner
Improve output display.
Open
Nobody has claimed this yet.
- Dominant language
- No language data
- Stars
- 0
- Forks
- 1
- Avg merge
- 7m
- Merged PRs (30d)
- 15
Description
External comments related to the display:
- Sort by CVSS score so most important things are at the top.
- npm audit output seems duplicative of OSV table? Don't make devs read the same information twice, put everything in one table if possible.
- npm list output doesn't seem useful, can't a developer just do that themselves when they go in to try to fix what's wrong? Again, information overload, unless it's vital to put that info in the PR, leave it out.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating the workflow's output generation and the sections that render the CVSS results, OSV table, npm audit output, and npm list output. Done means findings are ordered by CVSS importance and redundant or nonessential npm information is consolidated or omitted from the pull request output.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- github-actions
- Domain
- devops, security
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 48/100