google / google/osv.dev

Investigate funky repo URLs

Open
#5,813 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
2.9k
Forks
369
Avg merge
1d 17h
Merged PRs (30d)
149

Description

Gitter is finding a bunch of funky URLs from /tags endpoint (likely from CVE conversion?)
e.g.:
https://gitlab.freedesktop.org/xorg/xserver/-/merge_requests/939
https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/446
These are clearly not actual repo URLs

Contributor guide

Open the contributing guide

Research direction

Start by tracing the /tags endpoint and the CVE conversion path mentioned in the report. Check how the two GitLab merge-request and work-item URLs enter the tag results; done means identifying the source and defining or implementing a way to exclude non-repository URLs, with tests covering these examples.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.