pypa / pypa/advisory-database

Make it easy to generate a new PYSEC advisory by hand

Open
#74 3 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Shell
Stars
370
Forks
111
Avg merge
3h 52m
Merged PRs (30d)
4

Description

While most advisories are automatically generated, occasionally they will be hand-written (e.g. https://github.com/pypa/advisory-database/pull/72/).

It would be nice to add a tool (even if it's just a bash script) that can generate a template file and choose the latest PYSEC ID number, set timestamps, etc for instances when these need to be done by hand.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Review existing PYSEC advisory files and the repository's current automatic-generation process to identify the required template fields, timestamp format, and next advisory ID. Done means a hand-written advisory can be initialized consistently with those values and the issue's requested generation workflow is documented or runnable.

Written by the indexing model from the issue text.

Assessment

Tech stack
shell
Domain
security, tooling
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.