l3montree-dev / l3montree-dev/devguard

Accepted state of first-party vulnerabilities is not carried over to new branches

Open
#2,719 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

bug component/devguard-api
Dominant language
Go
Stars
161
Forks
43
Avg merge
1d 8h
Merged PRs (30d)
37

Description

The accepted state of a handled first-party vulnerability is not carried over to new branches.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by tracing the code that creates new branches and handles first-party vulnerability state. Check how a handled vulnerability is represented and whether its accepted state is copied during branch creation. Done means accepted first-party vulnerabilities retain that state on new branches, with relevant tests passing.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
backend, security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
50/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.