Skip to content

Add tagged meta-data to advisories

Background

#155 (closed)

Schema changes

  • name of the fields to be added: urls
  • data-structure to be used: dictionary, array, string: dictionary/map
  • data-constraints: rules to which the content of the field has to adhere: map keys (can be (patch|blog|attack); map values should be URLs

Advisory example

# ...
info:
  commit:
    - "https://github.com/tensorflow/tensorflow/commit/4071d8e2f6c45c1955a811fee757ca2adbe462c1"
  blog:
    - "https://github.com/tensorflow/tensorflow/blob/master/SECURITY.md"
  attack:
    - "https://hackerone.com/reports/1104077"
# ...

Intended users

Links / references

#155 (closed)

Edited by Julian Thome