mandatoryprogrammer / mandatoryprogrammer/tarnish
[Question] Can I use your soft to analyse extensions not published in Google webstore?
Nobody has claimed this yet.
- Dominant language
- JavaScript
- Stars
- 167
- Forks
- 26
- PR merge metrics
- No merged PRs in 30d
Description
It seems that tarnish downloads plugins from the webstore directly, but can it be used for an unpublished extension from a filesystem without any hard code tweaking? It can be helpful for developers and allows to include this checker in a CI/CD security pipeline.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reviewing how tarnish currently downloads plugins from the webstore and identify the entry point for supplying an extension. Done should mean an unpublished extension can be analyzed directly from a filesystem without hard-coded changes and can be used in a CI/CD security pipeline.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- ci-cd, devtools, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 30/100