THOUGHTFUL

Vendor task submission

Upload a Harbor vulnerability task package for Thoughtful Lab QC. Read the spec first, then submit a .tar.gz or .zip of your completed folder.

Documentation

Validate locally before uploading: python3 scripts/validate.py submissions/<vendor>/<task-id>/

Submit your package

Must match the folder name in your archive.

Archive the contents of submissions/<vendor>/<task-id>/ (includes submission.toml, README.md, task/, image-build/ or prebuilt.toml).