Unhappy Path - Round 2 about security HOT 4 CLOSED

haven't done this yet

Test 2

• Installed on public repository

General

• Quick Reference Guide link found at the bottom of instructions 404s

Activity: Enable Vulnerability alerts & GitHub Pages

• From an unhappy path test process, not a lot of opportunities to stray from the instructions

• Enabled GitHub Pages, bot closed issue

• Do we want to use project site on GitHub Pages when the site is a game as opposed to a project site? I just through I was going to see something different based on the wording used.

Update the Dependency

• Used the wrong fix for the dependency (1.1.1), bot responded with success

from security.

@brianamarie did some more unhappy path testing. ☝️

from security.

Thank you @beardofedu 🙇‍♀️ ✨ ❤️

• Quick Reference Guide link found at the bottom of instructions 404s

👍 #26

• From an unhappy path test process, not a lot of opportunities to stray from the instructions

👍 ❓

• Do we want to use project site on GitHub Pages when the site is a game as opposed to a project site? I just through I was going to see something different based on the wording used.

👍 #84

• Entered im a problem in the comment, bot responded with success and closed the issue

Currently we're not validating this comment for the correct version number, but we are checking later. @beardofedu do you think we should we check here?

• Possibly open issue if we should validate the comment

• bot responded with the next activity even though Data services weren't enabled
• Entered 2.6.8 (the vulnerable dependency #), bot responded with success
• Used the wrong fix for the dependency (1.1.1), bot responded with success

I also don't think we can validate this, because as the updated version exists, we won't be able to auto-check what that is and compare the user's number with it. @JasonEtco Can you please confirm that we can't get the current recommended version from the API anywhere, or check that data services are enabled?

• @JasonEtco verify

from security.

These are being verified in #91 so I'm going to close.

from security.