Security
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Newbie friendliness
- 30/100
Research direction
No files, tests, or entry points are named. Start by tracing how GitHub webhook events select benchmark commits, then determine how branch and tag refs are represented and where arbitrary commit runs are accepted; done means untrusted webhook data cannot trigger runs for arbitrary commits.
Written by the indexing model from the issue text.
Description
Currently, the public IP has no domain, and therefore no ability to do HTTPS.
Therefore, GitHub has to send the WebHook secret in plain text, and it can (maybe, theoretically?) be sniffed.
So we should probably only allow running benchmarks on branches and tags, not arbitrary commits (as GitHub stores a fork’s PR commits in the parent repo)
- Dominant language
- Rust
- Stars
- 4
- Forks
- 0
- Avg merge
- 4h 49m
- Merged PRs (30d)
- 5
Getting set up
This project ships no dev container, Dockerfile or contributing guide, so setting up is up to you: start from its README, and see our first-contribution guide for the general steps.
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from scverse/benchmark
-
bug
Difficulty 3/5 1-2 days Newbie friendliness 35/100
-
Difficulty 5/5 Over a week Newbie friendliness 15/100
-
PR runs
Difficulty 5/5 Over a week Newbie friendliness 25/100
-
PR runs Timeline
Difficulty 5/5 Over a week Newbie friendliness 25/100
-
SupportOpenMeta
Difficulty 5/5 Over a week Newbie friendliness 20/100
All issues in scverse/benchmark
Similar issues
-
review-drift
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
oxidecomputer/hansei#14 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 76/100
rubys/roundhouse#444 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 85/100
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
Maintainers usually reply within 1 day
-
install: root SSH tmpfiles.d drop-in is labeled etc_runtime_t instead of etc_tPossibly taken @andrewdunndev claimed this today. Open
Difficulty 2/5 1-3 hours Newbie friendliness 82/100
Maintainers usually reply within 1 day