Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

tools: import a conversion tool to and from VuXML #237

Open
wants to merge 2 commits into
base: main
Choose a base branch
from

Conversation

khorben
Copy link

@khorben khorben commented Apr 23, 2024

This is relevant to FreeBSD's ports, and possibly to any other project using the VuXML format in order to track vulnerabilities. (http://vuxml.freebsd.org)

The objective is to help FreeBSD offer security advisories in the OSV format, for ports first but possibly also for base components in the future. The corresponding ecosystem string (most likely FreeBSD) will be requested in a dedicated pull request.

Sponsored by: The FreeBSD Foundation

This is relevant to FreeBSD's ports.

Note that:

* There is no official ecosystem for FreeBSD ports yet
* A few elements of the VuXML DTD are not covered (e.g., \<uscertsa>,
  \<uscertta>)
* Cancelled VuXML events are not represented, for lack of information
  (withdrawal date...)
* Some versions do not match reality and need a correct increment
  (\<gt>)

Sponsored by:	The FreeBSD Foundation

Signed-off-by: Pierre Pronchery <[email protected]>
This is relevant to FreeBSD's ports.

Sponsored by:	The FreeBSD Foundation

Signed-off-by: Pierre Pronchery <[email protected]>
@khorben khorben marked this pull request as ready for review October 15, 2024 15:06
@andrewpollock
Copy link
Collaborator

Hi @khorben, this is exciting progress. I can review this from the OSV side of things, is there a VuXML SME who can review that side of things?

Also, if you look at tools/redhat for inspiration, having some test data to validate behaviour is also helpful.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants