VulnerabilityHistoryProject / vulnerability-history

vulnerabilityhistory.org

MIT License

33 stars 5 forks source link

GitHub PR integration: proof-of-concept #1106

Open andymeneely opened 1 year ago

andymeneely commented 1 year ago

Motivation

Not sure how possible this is, but here's the broad plan. I'd like to make the process of curation as frictionless as possible, so let's try to integrate with these features

Populate curation wizard from a PR
Submit this curation to a new GitHub PR
Update the curation to an existing PR

Details

Do some research on how we could achieve:

JS and HTTP APIs for GitHub.
- How much can we do anonymously?
- Can we pull the latest YML files from a PR?
- Can we pre-populate a PR?
- Can we send updates to a file in a PR?
The new form templates that GH is using might be helpful