Closed joshbuker closed 1 year ago
I don't think we need this quite yet, e.g. we will need to address the missing ecosystem problem, and hopefully OSV adds TIMESTAMP. Can we move this to a dicussion, it's also inline with the upstream first discussion.
Broke these changes into upstream PRs:
https://github.com/ossf/osv-schema/pull/128 https://github.com/ossf/osv-schema/pull/130 https://github.com/ossf/osv-schema/pull/131 https://github.com/ossf/osv-schema/pull/132 https://github.com/ossf/osv-schema/pull/133 https://github.com/ossf/osv-schema/pull/134 https://github.com/ossf/osv-schema/pull/135 https://github.com/ossf/osv-schema/pull/136
Currently in development & discussion.
See also: https://github.com/cloudsecurityalliance/gsd-tools/discussions/198