Skip to content
This repository was archived by the owner on Nov 26, 2025. It is now read-only.

Add search kind enumeration and enhance bot functionality - #186

Merged
garyellow merged 5 commits into
mainfrom
docs/readme
Aug 5, 2025
Merged

Add search kind enumeration and enhance bot functionality#186
garyellow merged 5 commits into
mainfrom
docs/readme

Conversation

@garyellow

@garyellow garyellow commented Aug 5, 2025

Copy link
Copy Markdown
Owner

Introduce a new enumeration for search criteria in the bot, improve message handling with quick reply options, and update the README for better clarity on features and usage. Include an example environment variable setup for easier configuration. Fix import issues related to message handling.

@garyellow
feat(course): add search kind enumeration and update bot logic
964479d 
- Introduced SearchKind.NONE to handle no search criteria.
- Updated CourseBot to utilize new search kind.
- Enhanced message handling with quick reply options.
@garyellow
chore: add .env.example for environment variable setup
9c9f352
@garyellow
docs: update README with enhanced features and usage instructions
f43a113 
- Expanded feature list and added detailed usage examples.
- Improved clarity on architecture and configuration.
@garyellow
fix(bot): import Action from argparse for message handling
c74d366
@garyellow
fix(bot): import Action from argparse for message handling
50a7889
@garyellow
garyellow enabled auto-merge August 5, 2025 19:05
@github-actions

github-actions Bot commented Aug 5, 2025

Copy link
Copy Markdown

Preview Has Been Created or Updated!

The Preview Image URL is ghcr.io/garyellow/ntpu-linebot:docs-readme.

@github-actions

github-actions Bot commented Aug 5, 2025

Copy link
Copy Markdown
Your image moby/buildkit:buildx-stable-1 critical: 0 high: 7 medium: 7 low: 1
Current base image alpine:3 critical: 0 high: 0 medium: 0 low: 0
Refreshed base image alpine:3 critical: 0 high: 0 medium: 0 low: 0
Updated base image alpine:3.21 critical: 0 high: 0 medium: 0 low: 0

@github-actions

github-actions Bot commented Aug 5, 2025

Copy link
Copy Markdown

🔍 Vulnerabilities of moby/buildkit:buildx-stable-1

📦 Image Reference moby/buildkit:buildx-stable-1
digestsha256:72a94020693fa94cecaf87505088224ff3246270ea64b291a4aaf63fd4b41f3c
vulnerabilitiescritical: 0 high: 7 medium: 7 low: 1
platformlinux/amd64
size108 MB
packages250
📦 Base Image alpine:3
also known as
  • 3.21
  • 3.21.3
  • latest
digestsha256:1c4eef651f65e2f7daee7ee785882ac164b02b78fb74503052a26dc061c90474
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
critical: 0 high: 5 medium: 1 low: 1 git 2.47.2-r0 (apk)

pkg:apk/alpine/git@2.47.2-r0?os_name=alpine&os_version=3.21

high : CVE--2025--48385

Affected range<2.47.3-r0
Fixed version2.47.3-r0
EPSS Score0.102%
EPSS Percentile29th percentile
Description

high : CVE--2025--46334

Affected range<2.47.3-r0
Fixed version2.47.3-r0
EPSS Score0.021%
EPSS Percentile4th percentile
Description

high : CVE--2025--27614

Affected range<2.47.3-r0
Fixed version2.47.3-r0
EPSS Score0.022%
EPSS Percentile4th percentile
Description

high : CVE--2025--46835

Affected range<2.47.3-r0
Fixed version2.47.3-r0
EPSS Score0.022%
EPSS Percentile4th percentile
Description

high : CVE--2025--48384

Affected range<2.47.3-r0
Fixed version2.47.3-r0
EPSS Score0.016%
EPSS Percentile2nd percentile
Description

medium : CVE--2025--48386

Affected range<2.47.3-r0
Fixed version2.47.3-r0
EPSS Score0.014%
EPSS Percentile2nd percentile
Description

low : CVE--2025--27613

Affected range<2.47.3-r0
Fixed version2.47.3-r0
EPSS Score0.019%
EPSS Percentile3rd percentile
Description
critical: 0 high: 1 medium: 2 low: 0 stdlib 1.24.2 (golang)

pkg:golang/stdlib@1.24.2

high : CVE--2025--22874

Affected range>=1.24.0-0
<1.24.4
Fixed version1.24.4
EPSS Score0.012%
EPSS Percentile1st percentile
Description

Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy validation. This only affected certificate chains which contain policy graphs, which are rather uncommon.

medium : CVE--2025--4673

Affected range>=1.24.0-0
<1.24.4
Fixed version1.24.4
EPSS Score0.044%
EPSS Percentile12th percentile
Description

Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information.

medium : CVE--2025--0913

Affected range>=1.24.0-0
<1.24.4
Fixed version1.24.4
EPSS Score0.015%
EPSS Percentile2nd percentile
Description

os.OpenFile(path, os.O_CREATE|O_EXCL) behaved differently on Unix and Windows systems when the target path was a dangling symlink. On Unix systems, OpenFile with O_CREATE and O_EXCL flags never follows symlinks. On Windows, when the target path was a symlink to a nonexistent location, OpenFile would create a file in that location. OpenFile now always returns an error when the O_CREATE and O_EXCL flags are both set and the target path is a symlink.

critical: 0 high: 1 medium: 2 low: 0 stdlib 1.24.3 (golang)

pkg:golang/stdlib@1.24.3

high : CVE--2025--22874

Affected range>=1.24.0-0
<1.24.4
Fixed version1.24.4
EPSS Score0.012%
EPSS Percentile1st percentile
Description

Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy validation. This only affected certificate chains which contain policy graphs, which are rather uncommon.

medium : CVE--2025--4673

Affected range>=1.24.0-0
<1.24.4
Fixed version1.24.4
EPSS Score0.044%
EPSS Percentile12th percentile
Description

Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information.

medium : CVE--2025--0913

Affected range>=1.24.0-0
<1.24.4
Fixed version1.24.4
EPSS Score0.015%
EPSS Percentile2nd percentile
Description

os.OpenFile(path, os.O_CREATE|O_EXCL) behaved differently on Unix and Windows systems when the target path was a dangling symlink. On Unix systems, OpenFile with O_CREATE and O_EXCL flags never follows symlinks. On Windows, when the target path was a symlink to a nonexistent location, OpenFile would create a file in that location. OpenFile now always returns an error when the O_CREATE and O_EXCL flags are both set and the target path is a symlink.

critical: 0 high: 0 medium: 2 low: 0 golang.org/x/net 0.33.0 (golang)

pkg:golang/golang.org/x/net@0.33.0

medium 5.3: CVE--2025--22872 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected range<0.38.0
Fixed version0.38.0
CVSS Score5.3
CVSS VectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
EPSS Score0.033%
EPSS Percentile8th percentile
Description

The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content following such tags as being placed in the wrong scope during DOM construction, but only when tags are in foreign content (e.g. , , etc contexts).

medium 4.4: CVE--2025--22870 Misinterpretation of Input

Affected range<0.36.0
Fixed version0.36.0
CVSS Score4.4
CVSS VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
EPSS Score0.011%
EPSS Percentile1st percentile
Description

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.

@github-actions

github-actions Bot commented Aug 5, 2025

Copy link
Copy Markdown

Recommended fixes for image moby/buildkit:buildx-stable-1

Base image is alpine:3

Name3.21.3
Digestsha256:1c4eef651f65e2f7daee7ee785882ac164b02b78fb74503052a26dc061c90474
Vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
Pushed5 months ago
Size3.6 MB
Packages19
OS3.21.3
The base image is also available under the supported tag(s): 3.21, latest

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.
TagDetailsPushedVulnerabilities
3
Newer image for same tag
Also known as:
  • 3.22.1
  • 3.22
  • latest
 Benefits:
  • Newer image for same tag
  • Minor OS version update
  • Tag was pushed more recently
  • Image has similar size
  • Tag is latest
  • Image has same number of vulnerabilities
  • Image contains similar number of packages
  • 3 was pulled 251K times last month
Image details:
  • Size: 3.8 MB
  • OS: 3.22.1
 3 weeks ago



Change base image

TagDetailsPushedVulnerabilities
3.21
Tag is preferred tag
Also known as:
  • 3.21.4
 Benefits:
  • Image is smaller by 4.6 KB
  • Minor OS version update
  • Tag is preferred tag
  • Tag was pushed more recently
  • Image has same number of vulnerabilities
  • Image contains equal number of packages
Image details:
  • Size: 3.6 MB
  • OS: 3.21.4
 3 weeks ago



@garyellow
garyellow merged commit 7fec5a5 into main Aug 5, 2025
7 checks passed
@garyellow
garyellow deleted the docs/readme branch August 5, 2025 19:07
@github-actions

github-actions Bot commented Aug 5, 2025

Copy link
Copy Markdown

Preview Has Been Deleted!

The Preview Image has been deleted.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@garyellow