google / google/osv.dev

Automated indexer project tracking based on OSV.dev advisories

Open
#1,989 3 comments 0 reactions 0 assignees View on GitHub
backlog enhancement
Dominant language
Go
Stars
2.9k
Forks
369
Avg merge
1d 17h
Merged PRs (30d)
149

Description

**Is your feature request related to a problem? Please describe.**
Indexer misses repositories publishing new C/C++ advisories that previously didn't exist in OSV.dev.
**Describe the solution you'd like**
By using OSV.dev advisories as a source of github repositories to index, we can always be up to date with indexer converage.

**Describe alternatives you've considered**
Keep the config bucket updated with a regular cron that checks new repositories. This doesn't provide much benefit over directly using the information contained in OSV.dev.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.