Giter Site home page Giter Site logo

reporter's Introduction

⚠️ reporter

Serverless React app for submitting templatized GitHub issues to a configured public or private repo.

Dev configuration

  1. Set GitHub token in .env (see .env.example)
  2. Set desired repo in src/config.json (e.g. code-423n4/reporter)
  3. Configure form fields in src/config.json

Production configuration

Add Netlify deploy variables:

  • REACT_APP_GITHUB_TOKEN

Configuration

You must pick one field to be named title, which will become the issue's title.

To can set a labelAll to be applied to all submitted issues.

You can also pick an additional field to be named label in order to predefine a set of option labels as select options or to allow an open-ended label field. (The latter seems a little nuts, but hey, you do you.)

The rest of the fields will get added to the body. Each subsection of the body will start with a markdown header h2 that will use the label of that field.

reporter's People

Contributors

code423n4 avatar sockdrawermoney avatar

Stargazers

 avatar

Watchers

 avatar

reporter's Issues

calculateResults script

  • Read judged-findings.csv fields:

contest, handle, eth, title, wardenRisk, ghissue, solo, judgedRisk, reportId, duplicateOf

  • Generate list for payments to be made:

  • Low shares — 1 * (0.9 ^ discovery count) / discovery count

  • Med shares — 3 * (0.9 ^ discovery count) / discovery count

  • High shares — 10 * (0.9 ^ discovery count) / discovery count

  • Generate json blob for contest findings:

{
  "contest": 3,
  "handle": "handlename",
  "risk": 2,
  "solo": true,
  "award": 2.23
}

issue title

Handle

adamavenir

Eth address

12341354

Vulnerability details

something about this vulnerability's details

Impact

what an impact this vuln had

such impact

Proof of concept

check it out.

if you do stuff,

things happen.

Tools used

all the tools, including:

  • this one
  • that one
  • the other thing

Recommended mitigation steps

Basically recommend never doing that again.

asdf

Email address

asdf

Handle

asdf

Eth address

aasdf

asdf

Handle

handle

Eth address

asdf

Vulnerability details

asdf

Impact

asdf

Proof of concept

asdf

Tools used

asdf

Recommended mitigation steps

asdf

New issue

Handle

adamavenir

Eth address

1232452345

Vulnerability details

asdf

Impact

asdf

Proof of concept

asdf

Tools used

asdf

Recommended mitigation steps

asdf

Testing email

Email address

[email protected]

Handle

adamavenir

Eth address

123

Vulnerability details

Vulnerability details

More:

details

Impact

impact

Proof of concept

proof!

so much proof!

Tools used

Tools.

Recommended mitigation steps

Recommend not doing this.

asdfasdf

Email address

adfam

Handle

asdf

Eth address

asdf

Vulnerability details

1

Impact

2

Proof of concept

3

Tools used

4

Recommended mitigation steps

5

Title of issue

Email address

[email protected]

Handle

adamavenir

Eth address

23r4234234

Vulnerability details

1

Impact

2

Proof of concept

3

Tools used

4

Recommended mitigation steps

5

asdf

Email address

asdf

Handle

asdf

Eth address

asdf

draftReport script

  • pull from github issues, data, and comments

  • generate markdown draft report based on outline below

  • Overview — (stock)

  • About C4 — (stock)

  • Wardens — generate list of wardens

  • Judge — leave blank

  • Summary — list findings counts, stock regarding process

  • Scope — pull from

  • Code — leave blank

  • System Overview — leave blank

  • Contract Logic — leave blank

  • Severity Criteria — (stock)

  • Issues Found By Severity

  • High Severity — generate from issues with comments

  • Medium Severity — generate from issues with comments

  • Low Severity — generate from issues with comments

  • Non-Critical Risks — generate from issues with comments

  • Gas Optimizations — generate from issues with comments

  • Disputed Findings — generate from issues with comments

  • Disclosures — (stock)

asdf

Handle

adamavenir

Eth address

123445

Vulnerability details

asdf

Impact

asdf

Proof of concept

asdf

Tools used

asdf

Recommended mitigation steps

asdf

Testing netlify.toml

Email address

[email protected]

Handle

adamavenir

Eth address

123123123

Vulnerability details

1

Impact

2

Proof of concept

3

Tools used

4

Recommended mitigation steps

5

Title of issue

Handle

adamavenir

Eth address

123

Vulnerability details

Something about the vulnerability here.

Impact

What an impact.

Proof of concept

Proof

of

concept

Tools used

So many tools

Recommended mitigation steps

I would recommend not doing this.

Test attempt 6 or so

Vulnerability details

Impact

Provide a detailed description of the impact this bug/vulnerability has on the overall system under test.

Proof of Concept

Provide screenshots, logs, or any other relevant proof that illustrates the concept of the bug/vulnerability you have identified.

Tools Used

Describe the tools used throughout your testing and analysis process.

Recommended Mitigation Steps

Describe the recommended steps that a project should use to mitigate the bugs or vulnerabilities you have identified.

Handle

adamavenir

Testing email submissions

Email address

[email protected]

Handle

adamavenir

Eth address

12351

Vulnerability details

Some details about the vulnerability

More here

Impact

What an impact

Proof of concept

Such concepts!

Wow

Tools used

Tools used

Recommended mitigation steps

We recommend not doing this.

iujiuhuhuh

Email address

oiuoiy

Handle

hhuuhljhgjg

Eth address

uhuhu

asdfasdf

Handle

asdasdf

Eth address

asdf

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.