Skip to content

Write a Lint rule check for "2 different files: same ghsa: value, only 1 cve: value; Same advisory" #661

New issue
New issue
Closed
Closed
Write a Lint rule check for "2 different files: same ghsa: value, only 1 cve: value; Same advisory"#661

Description

@jasnow
jasnow
opened on Jun 29, 2023

Write a Lint rule check for "2 different files: same ghsa: value, only 1 cve: value" (currently not flagged)
1 file is named "CVE-*" (has cve: and ghsa: values) and 1 file is named "GHSA-" (no cve: value, but has ghsa: value).

Activity

  1. jasnow
    changed the title [-]Lint rule check for "2 different files: same ghsa: value, only 1 cve: value; Same advisory"[/-] [+]Write a Lint rule check for "2 different files: same ghsa: value, only 1 cve: value; Same advisory"[/+] on Jun 29, 2023

  2. jasnow commented on Jul 11, 2023

    @jasnow
    jasnow
    on Jul 11, 2023
    MemberAuthor

    Minimum test case:

    1. Run grep -v "^cve:" gems/bootstrap/*14040* > gems/bootstrap/GHSA-3wqf-4x89-9g79.yml
    2. Run "rake" and it will be green but you have two copies of the same advisory.

    FYI: Verified today that PR #585 does not catch this condition.

  3. jasnow commented on Nov 27, 2025

    @jasnow
    jasnow
    on Nov 27, 2025
    MemberAuthor

    All future work will be covered by PR#585.

  4. jasnow
    closed this as completedon Nov 27, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions