microsoft / microsoft/AttackSurfaceAnalyzer
Single Command to Compare two Archives/Directories
Nobody has claimed this yet.
- Dominant language
- C#
- Stars
- 3k
- Forks
- 294
- PR merge metrics
- No merged PRs in 30d
Description
Is your feature request related to a problem? Please describe.
A user may desire to use ASA to compare the contents of two archives that already exist on the file system. While this is currently possible with the collect command and swapping the locations of the archives it would be more convenient for this to be a single command. This command would not gather any other types, just the file differences.
Describe the solution you'd like
Asa compare-archives archive1.zip archive2.tar
Would essentially run collect on the files contained inside the target archives as if they were rooted as absolute paths on the file system, ignoring the container name, and after collecting both run export collect to generate a report.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by tracing the existing collect command and the export collect flow. The proposed Asa compare-archives archive1.zip archive2.tar command should collect file differences from both archives without other types, ignore container names, and generate the comparison report; verify the behavior against both ZIP and TAR inputs.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- csharp
- Domain
- cli, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100