Open sjn opened 8 months ago
This is not a conversation about CPANSA being used by the GitHub Advisory Database. It's about having Perl listed as an environment so reports can be labeled Perl.
At the moment, the only help this needs is public visibility: that's what got GitHub's attention.
But, The CPAN Security group probably wants to make friends with the project manager of the GitHub Advisory Database.
Ah, fair enough. Thanks for clearing that up, @briandfoy.
@briandfoy has an ongoing conversation with Github about getting his CPANSA index used by them.
Is there something we can assist with?
Discussion here: https://github.com/github/advisory-database/issues/3536