uber-go / hackeroni Goto Github PK

H1 just added support for report state changing actions, we should add support: https://api.hackerone.com/docs/v1#/reports/state_changes

Currently there is no documentation or tests for the polling subpackage.

The API was recently updated to change the activity-bug-cloned object:

July 19th, 2016: removed inlining if a report in the bug cloned activity to avoid a denial of service vulnerability when the original report references the cloned report.

We should updated to match the current API

Currently there is no documentation and limited tests for the legacy subpackage.

H1 just added support for report commenting actions, we should add support: https://api.hackerone.com/docs/v1#/reports/comments

ReportService.Create should accept a vulnerability type as a parameter

H1 just added support for some write actions, we should add support: https://api.hackerone.com/docs/v1#/reports/assignee/update

Build process should check uber-license compliance on all pull-requests

Hi,

If you create a ReportListFilter with a false ...AtNull attribute, the attribute is not passed to the API. For example, this does not work:

        filter := h1.ReportListFilter{
                BountyAwardedAtNull: false,
                Program:             []string{"spotify"},
        }

This is because go-querystring considers false values to be empty: https://github.com/google/go-querystring/blob/master/query/encode.go#L53

I worked around this by changing the bool values in ReportListFilter to pointer to bool, but this is pretty ugly especially since you can't create a literal pointer to false in Go.

The legacy package does not support the new Severity attributes yet. It would be nice to add support until we can deprecate the legacy package.

H1 updated the API:

August 24th, 2016: added reputation, signal, and impact metrics of a report's reporter.

We should update the User object and test suites to reflect these new fields.