google / google/osv.dev

Create repo purls for GIT ecosystem ranges

Open
#3,807 5 comments 0 reactions 0 assignees View on GitHub
backlog data quality
Dominant language
Go
Stars
2.9k
Forks
369
Avg merge
1d 17h
Merged PRs (30d)
149

Description

**The CVE ID**
https://osv.dev/vulnerability/CVE-2019-25219

**Describe the data quality issue observed**
PURL entries are provided for the Debians. The Git repo could also have a PURL, in this case: `pkg:generic/github.com/chriskohlhoff/asio@asio-x-y-z` where the version comes from the tagging scheme used in that repo.

**Suggested changes to record**
Add a PURL for the Git repo. This supports the use case where the code is being packaged directly by the consumer, as opposed to installed via the Debian.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.