Merge pull request #114 from github/xavier-patch

Simplify the workflow

Author: xcorail

.github/actions/replicate/__tests__/replicate.test.js

@@ -77,7 +77,7 @@ const TEST_GENERATED_ISSUE: replicate.Issue = {
   bountyType: 'All For One',
   body: `Original external [issue](https://github.com/test_owner/test_repo/issues/1)
 
-Sumitted by [ghsecuritylab](https://github.com/ghsecuritylab)
+Submitted by [ghsecuritylab](https://github.com/ghsecuritylab)
 
 # This is the issue title
 This is the issue body first line

.github/actions/replicate/__tests__/replicate.test.ts

@@ -9,24 +9,24 @@ type CommentMap = {[K in BountyType]: string}
 export type Issue = {title: string, body: string, labels: string[], bountyType: BountyType}
 
 const COMMENT_TASK_LIST_AFO = `## Task List
-- [ ] Initial assessment - Please record your decision in the comment below
-  - [ ] CodeQL
-  - [ ] Security Lab
-- [ ] CodeQL: Generate result set and post the URL in the comment
-- [ ] Security Lab assessment: 
-  - [ ] Assess the Vulnerability Impact, the Vulnerability Scope, and the False Positive ratio based on the provided CodeQL result set
+- [ ] CodeQL Initial assessment - In case of rejection, please record your decision in the comment below:
+  - [ ] Acceptance
+  - [ ] Generate result set and post the URL in the comment
+- [ ] Security Lab assessment - In case of rejection, please record your decision in the comment below: 
+  - [ ] Acceptance
+  - [ ] Score the Vulnerability Impact, the Vulnerability Scope, and the False Positive ratio based on the provided CodeQL result set
+  - [ ] Document your assessments in comments below, for the CodeQL team 
   - [ ] Provide feedback to the author in the PR
 - [ ] CodeQL assessment:
-  - [ ] Assess the Code Maturity and the Documentation
   - [ ] Provide feedback to the author in the PR
   - [ ] Merge the PR into the experimental folder
-- [ ] Score - Both teams fill the score table according to the version of the PR merged into the repository
+  - [ ] Score the Code Maturity and the Documentation
 - [ ] Bounty Payment
 `
 
 const COMMENT_TASK_LIST_BS = `## Task List
-- [ ] Initial assessment from Security Lab
 - [ ] Security Lab assessment:
+  - [ ] Acceptance
   - [ ] Confirm the CVE 
   - [ ] Assess the Vulnerability Impact, the Vulnerability Scope
   - [ ] Get the CodeQL scores (False Positive ratio, Code Maturity and the Documentation) from the previous query rating