finding-forge: draft, score and lint a report before you submit
Draft, score (CVSS 3.1) and lint HackerOne / Bugcrowd reports before you submit — a completeness check plus a leaked-secret gate.
A finding is only as valuable as the report that carries it. finding-forge helps you write the kind of report a triager accepts on the first pass.
It drafts the report structure, scores severity with CVSS 3.1, and lints the result for completeness — and it will not let a report through that still contains a leaked secret.
What it does
- Scaffolds a HackerOne / Bugcrowd report from your findings.
- Calculates a CVSS 3.1 score.
- Checks completeness: reproduction steps, impact and remediation.
- Gates on leaked secrets, so nothing sensitive ships inside the write-up.
It is the reporting end of a workflow whose other tools keep you in scope and keep your evidence clean.