devtools: add script to run common vulnreport commands

Change-Id: If93d2fe085702e58dff9cabf0a0f4748645108f9
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/629357
Reviewed-by: Zvonimir Pavlinovic <zpavlinovic@google.com>
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
Reviewed-by: Damien Neil <dneil@google.com>

devtools/vulntriage.sh

@@ -0,0 +1,17 @@
+#!/bin/bash
+
+# Copyright 2021 The Go Authors. All rights reserved.
+# Use of this source code is governed by a BSD-style
+# license that can be found in the LICENSE file.
+
+# Script to run the common vulnreport commands in succession.
+
+set -e
+
+source devtools/lib.sh || { echo "Are you at repo root?"; exit 1; }
+
+go install ./cmd/vulnreport
+vulnreport triage
+vulnreport create
+vulnreport -batch=20 -status=UNREVIEWED commit
+vulnreport -batch=20 -status=NEEDS_REVIEW commit

doc/quickstart.md

@@ -12,6 +12,13 @@ Other useful docs:
 
 ### Triage
 
+NEW: To triage all issues, create reports that can be created automatically,
+and commit them, run:
+
+```sh
+./devtools/vulntriage.sh
+```
+
 0. Assign any unlabeled, unassigned issues on the tracker to yourself.
 1. If you haven't already, follow the [one-time-setup](#one-time-setup) process.
 2. Sync the vulndb repo, re-install vulnreport and switch to a fresh branch, e.g.: