Automatically close GHSAs that have their CVE published
Open
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 6
- Forks
- 2
- Avg merge
- 9h 7m
- Merged PRs (30d)
- 2
Description
Once a CVE ID is published with a patch URL reference attached the GHSA can be closed as the coordinator's job is complete. This will save us needing to manually track down GHSAs once a public pull request is created.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
No file or test is named in the issue. Trace the bot's handling of CVE publication and GHSA references, then verify that an advisory closes only when a published CVE has a patch URL; confirm existing behavior remains unchanged for other references.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- security
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 65/100