mirror of
https://github.com/projectdiscovery/nuclei-templates.git
synced 2026-01-24 12:33:22 +08:00
Update .review-bot
This commit is contained in:
@@ -55,13 +55,14 @@ Don’t:
|
||||
After functional validation, check:
|
||||
|
||||
- Template is in the correct folder, and filename matches `id`.
|
||||
- `id` is unique, descriptive, and uses 2-3 keywords (e.g., `alumni-management-sqli.yaml`).
|
||||
- `id` is unique, descriptive, and uses 2-3 keywords (e.g., `alumni-management-sqli.yaml`). For CVE templates, the ID should be the CVE itself for example, CVE-2020-0796
|
||||
- `name` follows the format: `<Company> <Product> <Version> - <Vulnerability Class>` (e.g., `Adobe Coldfusion <=8.0.1 - Cross-Site Scripting`).
|
||||
- Fix capitalization, typos, or grammatical errors.
|
||||
- Update `tags`:
|
||||
- Add vendor names (e.g., `Atlassian` for Jira/Confluence).
|
||||
- Use `misconfig` for misconfigurations, `oss` for open-source CMS, `oast` for OAST templates, `intrusive` for file uploads or modifications.
|
||||
- For CVEs, include `cve` and `cveYYYY` (e.g., `cve2022`).
|
||||
- Tags should not contain spaces
|
||||
- Use `metadata` for additional info (e.g., `verified: true`, Shodan/FOFA queries).
|
||||
- Ensure proper `references` (e.g., WordPress plugin links, vendor pages).
|
||||
- Maintain consistent template structure and remove unnecessary headers/parameters.
|
||||
|
||||
Reference in New Issue
Block a user