Comments (4)
Hi @sickcodes,
I think this is a great idea! I also suggest to:
- To do so on every PR so the
program-list.json
is always sorted and de-duplicated. For example, we can add a workflow that checks for this. - To de-duplicate entries based on "policy_url". Now we have quite a lot of duplicates (e.g. for Google VRP) and I can't find a reason why.
from diodb.
- To make a helper script that adds an entry to the
program-list.json
. Alike thenpm init
command (in a sense of interactive questionnaire). I think this will be useful for those who contribute for the first time to abstract away formatting issues from them and make contributing experience more smooth. The other way to achieve this is to add a git hook that will format before the commit automatically. I can help with this.
from diodb.
Hi @sickcodes,
I think this is a great idea! I also suggest to:
To do so on every PR so the
program-list.json
is always sorted and de-duplicated. For example, we can add a workflow that checks for this.To de-duplicate entries based on "policy_url". Now we have quite a lot of duplicates (e.g. for Google VRP) and I can't find a reason why.
Workflow sounds good, but I do like the idea of having users de duplicate it themselves :)
Definitely can't de-dupe based on policy URL as multiple companies will have the same security "drop off point," and all blanks would disappear.
@yesnet0 has mentioned in the past program name is key (if I recall correctly)
It's also easy to de-dupe alphabetically for obvious reasons (eg. character case differences etc)
Instead of a git hook, I would go for a unit test of barebones alpine with jq to sort using the command in title.
Since maintainers can edit the forks, it reminds the pull requester to dedupe themselves, but collaborators can subsequently edit that individual's fork before commit, rather than automatically, just in case it creates errors.
However I do like the idea, and a little git hook sounds awesome.
apk add jq
jq -s '.[] | unique_by(.program_name)' < program-list.json > program-list.json.tmp
mv program-list.json.tmp program-list.json
That solves both Python scripts
from diodb.
I do like the idea of having users de duplicate it themselves :)
Me too because automatic de-duplication may lead to entry losses or other types of corruption.
Definitely can't de-dupe based on policy URL as multiple companies will have the same security "drop off point," and all blanks would disappear.
Makes sense, thank you!
from diodb.
Related Issues (20)
- Making it easier for non-Github users to update diodb HOT 3
- Ingest/merge CISAs Federal Gov VDP register HOT 3
- Diodb front end only works in landscape mode on mobile HOT 1
- [idea] Automatically sync programs from `chaos.projectdiscovery.io`
- [idea] Make separate file for each program from `program-list.json` (instead of keeping all programs in one file) HOT 13
- Search is broken HOT 2
- Public Disclosure Field Discussion: disclosure_timeline_days type requirement is overly strict for some policies HOT 1
- Proper 404 Checking
- Add Gradle
- Define `partial` and `full` safe harbor
- Disclose.io HOT 1
- Revamp the contribution process HOT 3
- Revamp `README.md`
- ๐ก Participate in Gitcoin Grants and Bounties HOT 1
- Add URL and email validations
- Footer social media link need to be fix and stale Copyrights HOT 2
- Plisio BugBounty HOT 1
- d53df6856bbafad4f7dd257ef9d96c56fd8700bcf d378d96a53dc695da2928f6i0 Length Tััะต Timestamp 2582 image/webp
- add new program: Grafana Labs HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. ๐๐๐
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google โค๏ธ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from diodb.