python / python/psrt-ghsa-bot

Automatically credit "remediation developer" and "remediation reviewer"

Open
#53 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Python
Stars
6
Forks
2
Avg merge
9h 7m
Merged PRs (30d)
2

Description

If a private_fork has a pull request, is that information accessible via the API? If so: the bot can automatically add remediation developers and reviewers based on that pull request. These roles shouldn't clobber existing roles, so if the user is the reporter or coordinator they keep those roles.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by checking whether the GitHub API exposes a pull request for a private_fork, then trace where remediation developers, reviewers, reporters, and coordinators are assigned. Done means the bot derives the two remediation roles from that pull request when available without replacing existing reporter or coordinator roles.

Written by the indexing model from the issue text.

Assessment

Tech stack
github, python
Domain
api, backend, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
52/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.