[agents] Mandate local reproduction for vulnerability classification This CL updates the v8-security-triaging skill to enforce empirical verification as a prerequisite for classifying reports as vulnerabilities. Key changes: - Added a "Mandatory Local Reproduction" core principle to the v8-security-triaging skill. - Updated the classification guidance to mandate "Failed to Reproduce" if local reproduction is unsuccessful. - Enforced that "Vulnerability" status can only be assigned after successful local reproduction. R=ishell@chromium.org No-Try: true Change-Id: I81a86835fea75c5a0d84d4878dee74fb2efb2975 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7830726 Reviewed-by: Igor Sheludko <ishell@chromium.org> Commit-Queue: Clemens Backes <clemensb@chromium.org> Cr-Commit-Position: refs/heads/main@{#107196}
V8 is Google's open source JavaScript engine.
V8 implements ECMAScript as specified in ECMA-262.
V8 is written in C++ and is used in Chromium, the open source browser from Google.
V8 can run standalone, or can be embedded into any C++ application.
V8 Project page: https://v8.dev/docs
Checkout depot tools, and run
fetch v8
This will checkout V8 into the directory v8 and fetch all of its dependencies. To stay up to date, run
git pull origin
gclient sync
For fetching all branches, add the following into your remote configuration in .git/config:
fetch = +refs/branch-heads/*:refs/remotes/branch-heads/*
fetch = +refs/tags/*:refs/tags/*
Please follow the instructions mentioned at v8.dev/docs/contribute.