Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Change CVE output format #443

Closed
martincostello opened this issue May 2, 2023 · 1 comment
Closed

Change CVE output format #443

martincostello opened this issue May 2, 2023 · 1 comment
Assignees
@martincostello
Labels
feature-request A request for new functionality
Milestone
v2.2.0

Comments

@martincostello
Copy link
Owner

Is your feature request related to a problem?

While reviewing #442 I found that if you output a raw CVE identifier, GitHub will create an auto-link to the GitHub Advisory Database and generate a hovercard for it.

image

Describe the solution you'd like

Change the output format of the CVEs so that pull requests get hovercards in the pull request descriptions.

- * [${cve-id}](${cve-url})
+ * ${cve-id}

Describe alternatives you've considered

- * [${cve-id}](${cve-url})
+ * ${cve-id} ([Mitre](${cve-url}))

Additional context

None.
@martincostello martincostello added the feature-request A request for new functionality label May 2, 2023
martincostello added a commit that referenced this issue May 3, 2023
@martincostello
Support CVE hovercards in GitHub
c2b0eab 
Remove URLs from the pull request Markdown content for CVEs in GitHub.com so that CVE IDs render a hovercard.
The link format is unchanged for GitHub Enterprise Server as I don't believe that's supported as the appliance would need internet connectivity.
Resolves #443.
@martincostello martincostello added this to the v2.2.0 milestone May 3, 2023
@martincostello martincostello self-assigned this May 3, 2023
@martincostello
Copy link
Owner Author

image

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@martincostello martincostello

Labels
feature-request A request for new functionality
Projects
None yet
Milestone
v2.2.0
Development

No branches or pull requests
1 participant
@martincostello