Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

x/vulndb: new repository #45519

Closed
FiloSottile opened this issue Apr 12, 2021 · 2 comments
Closed

x/vulndb: new repository #45519

FiloSottile opened this issue Apr 12, 2021 · 2 comments
Labels
FrozenDueToAge NeedsFix The path to resolution is known, but the work has not been done. vulncheck or vulndb Issues for the x/vuln or x/vulndb repo
Milestone
Unreleased

Comments

@FiloSottile
Copy link
Contributor

Per https://golang.org/design/draft-vulndb, I am creating golang.org/x/vulndb following the instructions at https://golang.org/wiki/CreatingSubRepository.

This repository will host the Go Vulnerability Database source of truth, and the tooling that generates the client-facing database.

Unlike other repositories, github.com/golang/vulndb will have its own issue tracker, used to triage vulnerability reports.

Until a proposal is filed and approved for the Checksum Database, nothing in this repository will be covered by any compatibility promise, and the repository might get changed, renamed, or deleted.
@FiloSottile FiloSottile added the NeedsFix The path to resolution is known, but the work has not been done. label Apr 12, 2021
@FiloSottile FiloSottile added this to the Unreleased milestone Apr 12, 2021
@gopherbot
Copy link
Contributor

Change https://golang.org/cl/312732 mentions this issue: all: update x/build version for vulndb

gopherbot pushed a commit to golang/website that referenced this issue Apr 23, 2021
@toothrot @dmitshur
all: update x/build version for vulndb
8e455e2 
See instructions at https://golang.org/wiki/CreatingSubRepository

For golang/go#45519

Change-Id: I4765a5be426ff4315fea8534d250696dccb7317e
Reviewed-on: https://go-review.googlesource.com/c/website/+/312732
Run-TryBot: Alexander Rakoczy <alex@golang.org>
Trust: Alexander Rakoczy <alex@golang.org>
Reviewed-by: Heschi Kreinick <heschi@google.com>
Reviewed-by: Dmitri Shuralyov <dmitshur@golang.org>
TryBot-Result: Go Bot <gobot@golang.org>
@dmitshur
Copy link
Contributor

dmitshur commented Apr 23, 2021 •
edited
Loading

golang.org/x/vulndb is now live. Please comment or reopen if there's anything more. (CC @rolandshoemaker.)

I'll mention that since this x repo has its own issue tracker, you may or may not be interested in turning on some of GopherBot's general gardening tasks (see list here), as controlled by gardenIssues.

@golang golang locked and limited conversation to collaborators Apr 23, 2022
@julieqiu julieqiu added the vulncheck or vulndb Issues for the x/vuln or x/vulndb repo label Sep 8, 2022
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
FrozenDueToAge NeedsFix The path to resolution is known, but the work has not been done. vulncheck or vulndb Issues for the x/vuln or x/vulndb repo
Projects
Go Security
Status: No status
Milestone
Unreleased
Development

No branches or pull requests
5 participants
@toothrot @FiloSottile @dmitshur @julieqiu @gopherbot