haskell / haskell/security-advisories
Leverage the declaration field to specify which function is affected
Open
- Dominant language
- Haskell
- Stars
- 64
- Forks
- 27
- Avg merge
- 3h 39m
- Merged PRs (30d)
- 1
Description
The hsec-tool seems to parse the parse the declaration field but it does not export the field to OSV.
Then what about scanners, how could they check if an affected declaration is used, e.g. can `.hie` works?
Contributor guide
Assessment
This issue has not been assessed yet.