nix-security-tracker
nix-security-tracker copied to clipboard
Web service for managing information on vulnerabilities in software distributed through Nixpkgs
When the tool reports a security issue in a dependency, a reasonable question a user may have is: 'where does this dependency come from?' This can typically by easily answered...
feat: nixpkgsissue activity log view Improve the messy representation of the different `pghistory` event tables: - Create a view `log_nixpkgsissue` in the PostgreSQL backend and introduce an unmanaged model `NixpkgsIssueLogView`...
This is here to collect all the concerns about the long term performance of the security tracker. A big part of the concern is with the disk space consumption rate...
I am trying to bulk ingest some CVE on the staging deployment: ``` WARNING 2023-12-20 13:58:15,142 ingest_bulk_cve 216849 140574326007616 $DATA_CACHE_DIRECTORY was not set. Using the local dir. Traceback (most recent...
Create a simple tabbed view for those derivations that appear in an issue marked as 'affected'. The styles broke in weird ways when moved to the main `style.css`, so I...
Refers to a different 'fuse' product, we should probably #81
Certain CPE vendors (such as `apple` in case of #77 or `redhat`) or full CPEs (in case of `type74:ed`) commonly refer to vendor-specific versions or products. We could selectively exclude...
I need the revert to work on the stylesheets in production mode, @fricklerhandwerk, if you can get the deployment setup to work with SASS, I can drop it. TODO: -...
Waiting for CI to finish is time consuming, when merging PRs. If you install https://mergify.com/ into this org, I can add some configuration to configure merge queues. While github also...