search

aboutcode-org / federatedcode

Decentralized and federated metadata for software applications
https://federatedcode.readthedocs.io/
1 stars 1 forks source link

Commit exported VulnerableCode data to the backing git repository(ies) #20

Closed pombredanne closed 1 month ago

pombredanne commented 1 month ago

We want to commit the VCIO data export to the Git repository. For now we can use PR on GitHub. This can be relaxed later with direct commits.

keshav-space commented 1 month ago

The simple way to test this is to follow the steps below after installing VulnerableCode (https://vulnerablecode.readthedocs.io/en/latest/installation.html):

  1. Supply these environment variables in the .env file: VULNERABLECODE_EXPORT_REPO_URL, VULNERABLECODE_GITHUB_SERVICE_TOKEN, VULNERABLECODE_GITHUB_SERVICE_NAME, VULNERABLECODE_GITHUB_SERVICE_EMAIL.
  2. Run these commands: 
    python3 manage.py export ../vcio-export
    python3 manage.py commit_export ../vcio-export
  3. By now, you should have a pull request in your export repo with the latest changes. Review and merge it as needed.