search

adoptium / temurin-vdr-generator

Scripts for generating Vulnerability Disclosure Reports
1 stars 3 forks source link

use purl version ranges #50

Open Scanteianu opened 3 weeks ago

Scanteianu commented 3 weeks ago

https://github.com/adoptium/temurin-vdr-generator/blob/main/cvereporter/fetch_vulnerabilities.py#L188

jiekang commented 3 weeks ago

Maybe relevant reading for someone who doesn't know what purl's are?

https://github.com/package-url/purl-spec

Or if you have better links that would be helpful @Scanteianu Thanks!

Scanteianu commented 2 weeks ago

in this example in the purl readme, they mention github as an example. It's not perfect, but we could use the github as a reference to the open jdk, I guess https://github.com/package-url/purl-spec?tab=readme-ov-file#some-purl-examples

https://github.com/openjdk/jdk

I'm not sure if we get a direct 1:1 mapping from the tags in that repo to jdk url examples. @tellison @smlambert opinions?