Skip to content

feat: sync tool for repo-based git enumeration flags allowlist - #5800

Merged
Ly-Joey merged 11 commits into
google:masterfrom
Ly-Joey:feat-repo-cab-allowlist-sync-tool
Aug 12, 2026
Merged

feat: sync tool for repo-based git enumeration flags allowlist#5800
Ly-Joey merged 11 commits into
google:masterfrom
Ly-Joey:feat-repo-cab-allowlist-sync-tool

Conversation

@Ly-Joey

@Ly-Joey Ly-Joey commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

Add a tool to sync repo-based git analysis flags allowlist entries from yaml to datastore.

Related: #5797
(Stack PR makes me sad)

@Ly-Joey
Ly-Joey force-pushed the feat-repo-cab-allowlist-sync-tool branch from db1789e to 9bfb442 Compare August 6, 2026 01:45
@Ly-Joey
Ly-Joey marked this pull request as ready for review August 6, 2026 01:46
@Ly-Joey
Ly-Joey requested a review from another-rex August 7, 2026 05:21
@Ly-Joey Ly-Joey changed the title feat: sync tool for repo-based CAB allowlist feat: sync tool for repo-based git enumeration flags allowlist Aug 7, 2026
Ly-Joey added a commit that referenced this pull request Aug 7, 2026
#5800 added a README.md and triggered a markdown link scan across
osv.dev.
This PR attempts to fix the issues and unblock myself.
@Ly-Joey
Ly-Joey force-pushed the feat-repo-cab-allowlist-sync-tool branch from 4e63b4c to 0c90492 Compare August 7, 2026 06:13
Comment thread tools/repo-allowlist-sync/main.go Outdated
Comment thread tools/repo-allowlist-sync/main.go Outdated
Comment thread tools/repo-allowlist-sync/main.go Outdated
Comment thread tools/repo-allowlist-sync/main.go Outdated
Comment thread tools/repo-allowlist-sync/main.go Outdated
Comment thread tools/repo-allowlist-sync/main.go Outdated
Comment thread tools/repo-allowlist-sync/main.go Outdated

@another-rex another-rex left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Maybe also add a --validate flag, similar to how source_sync.py has for validating the yaml keys and regexes are correct

Ly-Joey added a commit that referenced this pull request Aug 11, 2026
Add repo-based git analysis flags logic in worker before we send the
request to gitter to enumerate affected commits.

List of configurable bools:
- consider_all_branches
- detect_cherrypicks_intro
- detect_cherrypicks_fixed
- detect_cherrypicks_limit

The allowlist is in datastore. 
#5800 is the tool to sync the allowlist (in yaml) into datastore
entities.
@Ly-Joey
Ly-Joey requested review from a team and michaelkedar August 12, 2026 00:22
@Ly-Joey
Ly-Joey merged commit 4852529 into google:master Aug 12, 2026
27 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants