Haskell security advisory database (Hackage packages)

github / advisory-database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Creative Commons Attribution 4.0 International

1.72k stars 323 forks source link

Haskell security advisory database (Hackage packages) #4224

Open MathiasSM opened 5 months ago

MathiasSM commented 5 months ago

Repository: https://github.com/haskell/security-advisories

They had an issue to created to add the database to this repo, but was closed and I'm not sure if conversations ever happened: https://github.com/haskell/security-advisories/issues/11

MathiasSM commented 5 months ago

They confirmed the task was closed by mistake. So I'm asking to integrate haskell security advisories into this repo :) Let me know how and if I can help achieving that!

mihaimaruseac commented 5 months ago

The haskell/seucirty-advisories issue has been reopened

carogalvin commented 5 months ago

@MathiasSM @mihaimaruseac thank you for reaching out! Unfortunately, Haskell is not currently a supported ecosystem for the Advisory Database, so we would not be able to support adding these as reviewed advisories that would then generate Dependabot alerts. We don't currently have capacity to expand our ecosystem support for the Advisory Database, but I am happy to leave this issue open so that others with similar needs can upvote and chime in.