Clarify developer guidance.
Nobody has claimed this yet.
Assessment
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Newbie friendliness
- 58/100
Research direction
Start by locating how the shared OSV Scanner GitHub Action constructs its current vulnerability output. Update the output so its first line identifies high or critical vulnerable packages and gives actionable guidance, while the remaining information is kept in a details object; verify that developers can act from the first line alone.
Written by the indexing model from the issue text.
Description
Summary of a comment elsewhere:
The top of the output should be clear: "The following packages have high/critical vulnerabilities and need to be updated: X, Y, Z" <-- the current output requires an enormous amount of developer effort to scan through a wall of text to try to figure out if they need to do anything at all. One line at the top should give clear guidance to developers. They should be able to take action based solely on that one line. Everything else should be in a details object [...]
- Dominant language
- No language data
- Stars
- 0
- Forks
- 1
- Avg merge
- 13m
- Merged PRs (30d)
- 3
Getting set up
This project ships no dev container, Dockerfile or contributing guide, so setting up is up to you: start from its README, and see our first-contribution guide for the general steps.
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from digitalbazaar/github-workflow-shared-action-osv-scanner
-
Difficulty 4/5 3-5 days Newbie friendliness 45/100
digitalbazaar/github-workflow-shared-action-osv-scanner#41 · 1 comment ·
-
Difficulty 4/5 3-5 days Newbie friendliness 45/100
digitalbazaar/github-workflow-shared-action-osv-scanner#40 · 1 comment ·
-
Difficulty 3/5 1-2 days Newbie friendliness 48/100
digitalbazaar/github-workflow-shared-action-osv-scanner#39 · 1 comment ·
-
Difficulty 3/5 1-2 days Newbie friendliness 64/100
digitalbazaar/github-workflow-shared-action-osv-scanner#38 ·
-
Difficulty 5/5 Over a week Newbie friendliness 25/100
digitalbazaar/github-workflow-shared-action-osv-scanner#18 ·
All issues in digitalbazaar/github-workflow-shared-action-osv-scanner
Similar issues
-
enhancement
Difficulty 2/5 Half a day Newbie friendliness 68/100
Maintainers usually reply within 1 day
-
namespace operations
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
EclipseFdn/open-vsx.org#14373 ·
Maintainers usually reply within 1 day
-
Tool: FinOps hubs Type: Cleanup
Difficulty 2/5 1-3 hours Newbie friendliness 76/100
microsoft/finops-toolkit#2354 ·
Maintainers usually reply within 4 days
-
Difficulty 2/5 1-3 hours Newbie friendliness 90/100
registrystack/registry-stack#2162 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
bioconda/bioconda-recipes#70401 ·
Maintainers usually reply within 2 days