Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Collect all fix commits #1703

Open
5 tasks
pombredanne opened this issue Dec 20, 2024 · 0 comments
Open
5 tasks

Collect all fix commits #1703

pombredanne opened this issue Dec 20, 2024 · 0 comments

Comments

@pombredanne
Copy link
Member

Solution: How to collect fix commits?

There are many ways listed in this issue by @elanzini and inputs from @copernico:

I would reformulate the sources as

  1. Include databases of these fixes, like the Project KB
  2. Collect these from data we get in structured advisories and their references
  3. Analyse the code, commit histories, issues trackers, mailing lists and structured advisories to collect these.
  4. Support fix triage, review and refinement

For now, we will start with 2., meaning that we create an improver that will scout the References to create CodeFix entries. The CodeFix design is at:

And the issue for the improver is at:

Later, we could also collect explicit data available in some importers (symbols in in Go advisories, commits in GHSA) and also do 1., 3. and 4.

See also:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant