Skip to content

feat: add include-withdrawn flag to linter and skip withdrawn by default#573

Merged
another-rex merged 2 commits into
ossf:mainfrom
rjerrems:add-include-withdrawn
Jul 9, 2026
Merged

feat: add include-withdrawn flag to linter and skip withdrawn by default#573
another-rex merged 2 commits into
ossf:mainfrom
rjerrems:add-include-withdrawn

Conversation

@rjerrems

@rjerrems rjerrems commented Jul 9, 2026

Copy link
Copy Markdown
Contributor

No description provided.

@rjerrems rjerrems force-pushed the add-include-withdrawn branch from 38be143 to f29a089 Compare July 9, 2026 03:35
@another-rex another-rex requested a review from jess-lowe July 9, 2026 03:38

// Inject a duplicate entry into "related" to ensure a finding is triggered when run
badRelated := []byte(`"related": ["CVE-2021-44832", "CVE-2021-44832"],`)
contentBytes = bytes.Replace(contentBytes, []byte(`"related": [`), badRelated, 1)

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think this replace results in an invalid JSON? You might need to remove the last ], in the badRelated var.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good catch, I have changed it to properly parse the JSON and replace that key with a known bad value.

@rjerrems rjerrems force-pushed the add-include-withdrawn branch from 1c5a745 to 06cba38 Compare July 9, 2026 04:07
@another-rex another-rex enabled auto-merge (squash) July 9, 2026 04:08
@another-rex another-rex merged commit a9f2a88 into ossf:main Jul 9, 2026
11 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants