Skip to content

Commit

Permalink
docs: update triage.md on handling duplicates
Browse files Browse the repository at this point in the history
Change-Id: Ie820e613acfc294abefd9760c733d015bfe8f10e
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/623715
Reviewed-by: Tatiana Bradley <[email protected]>
LUCI-TryBot-Result: Go LUCI <[email protected]>
  • Loading branch information
zpavlinovic committed Oct 30, 2024
1 parent 3577567 commit 0419a58
Showing 1 changed file with 2 additions and 9 deletions.
11 changes: 2 additions & 9 deletions doc/triage.md
Original file line number Diff line number Diff line change
Expand Up @@ -199,13 +199,8 @@ The issue can be closed without further action.
Sometimes an issue describes a vulnerability that we already have a report for.
The worker doesn't always detect this automatically.

If the issue is indeed a duplicate:

1. Apply the label `duplicate` to the issue.
2. Find the duplicate issue (say it is #NNN) in the issue tracker, and on the
current issue, write the comment "Duplicate of #NNN". (No period after the
number.)
3. If a report has already been created for #NNN:
If the issue is indeed a duplicate, find the duplicated issue (say it is #NNN).
If a report has already been created for #NNN:
1. Find the report yaml file (say GO-YYYY-NNNN.yaml) in `data/reports`, and add
the duplicate IDs to the `cves` or `ghsas` section, as appropriate.
Running `vulnreport fix` can sometimes find the IDs automatically.
Expand All @@ -216,8 +211,6 @@ If the issue is indeed a duplicate:
You can also add "Fixes #DDDD" (the number of the duplicate issue) to the
commit message, or close it manually.
3. Mail the commit.
4. If no report has been created for #NNN yet, make sure the duplicate ID is present
somewhere in issue #NNN for reference, and close the duplicate issue.

## Standard Library Reports

Expand Down

0 comments on commit 0419a58

Please sign in to comment.