microsoft / microsoft/OSSGadget
OSS-Detect-Backdoor rules should be embedded
Nobody has claimed this yet.
- Dominant language
- C#
- Stars
- 371
- Forks
- 58
- PR merge metrics
- No merged PRs in 30d
Description
OSS-Detect-Backdoor currently relies on the json rules being on disk due to the design of the oss-characteristic apis - which are in turn caused by use of specific app inspector APIs.
OSS-Detect-Backdoor should instead of copying the rules files to disk and reading them from there, embed the rules like in detect cryptography, to enable automatic rule verification in pipeline tests in particular.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by comparing OSS-Detect-Backdoor with the detect cryptography implementation to identify how its JSON rules are currently loaded and copied to disk. Trace the oss-characteristic APIs and pipeline tests, then verify that rule checks work without rules files on disk.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- csharp
- Domain
- security
- Issue type
- Refactor
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 42/100