Skip to content

Conversation

@jasnow
Copy link
Contributor

@jasnow jasnow commented Jan 8, 2026

Added more info about PR prep to CONTRIBUTING.md file.

Copy link
Member

@postmodern postmodern left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I like the idea of recommending running yamllint in addition to running the specs. However, some of the bullet points got moved around and the markdown formatting could be a bit better.

* Please see the [README](README.md#schema) for more documentation on the
YAML Schema.
* Prior to submitting a pull request, run the tests:
* Values for 'cvss_v2', 'cvss_v3', and 'cvss_v4' can be found in
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should be formatted similar to the above comments about title:.

Also, it might be easier to link directly to NVD's search form, as well as GitHub Advisories.

the reference URLs from nvd.nist.gov, https://github.com/advisories,
and the repo's security advisory.
* Prior to submitting a pull request,
* Run yamlint to check yaml format
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

* Prior to submitting a pull request,
* Run yamlint to check yaml format
* https://yamllint.readthedocs.io/en/stable
* YAML must be indented by 2 spaces.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This line should stay at the top.

* https://yamllint.readthedocs.io/en/stable
* YAML must be indented by 2 spaces.
* Please see the [README](README.md#schema) for more documentation on the
YAML Schema.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This bullet point should stay at the top, below the other YAML schema recommendations.

@jasnow
Copy link
Contributor Author

jasnow commented Jan 8, 2026

Too confusing so closing PR.

@jasnow jasnow closed this Jan 8, 2026
@jasnow jasnow deleted the ghsa-syncbot-2026-01-08-09_58_28 branch January 8, 2026 20:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants