devtools: add script to run common vulnreport commands

Change-Id: If93d2fe085702e58dff9cabf0a0f4748645108f9 Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/629357 Reviewed-by: Zvonimir Pavlinovic <[email protected]> LUCI-TryBot-Result: Go LUCI <[email protected]> Reviewed-by: Damien Neil <[email protected]>
golang · Nov 20, 2024 · 598dcdf · 598dcdf
1 parent 841b6b3
commit 598dcdf
Show file tree

Hide file tree

Showing 2 changed files with 24 additions and 0 deletions.
diff --git a/devtools/vulntriage.sh b/devtools/vulntriage.sh
@@ -0,0 +1,17 @@
+#!/bin/bash
+
+# Copyright 2021 The Go Authors. All rights reserved.
+# Use of this source code is governed by a BSD-style
+# license that can be found in the LICENSE file.
+
+# Script to run the common vulnreport commands in succession.
+
+set -e
+
+source devtools/lib.sh || { echo "Are you at repo root?"; exit 1; }
+
+go install ./cmd/vulnreport
+vulnreport triage
+vulnreport create
+vulnreport -batch=20 -status=UNREVIEWED commit
+vulnreport -batch=20 -status=NEEDS_REVIEW commit
diff --git a/doc/quickstart.md b/doc/quickstart.md
@@ -12,6 +12,13 @@ Other useful docs:
 
 ### Triage
 
+NEW: To triage all issues, create reports that can be created automatically,
+and commit them, run:
+
+```sh
+./devtools/vulntriage.sh
+```
+
 0. Assign any unlabeled, unassigned issues on the tracker to yourself.
 1. If you haven't already, follow the [one-time-setup](#one-time-setup) process.
 2. Sync the vulndb repo, re-install vulnreport and switch to a fresh branch, e.g.: