Question: Is RustSec integration ongoing?

[icefoxen]

I saw some issue threads both here and in the RustSec repo about republishing RustSec's advisories in as Crev proofs. It looks like you'd done this already in your own proof repo but I was wondering if it was being kept up to date. Is there an automated tool to fetch RustSec advisories and turn them into Crev proofs, either pushing to a well-known repo (possibly under the RustSec organization?) people can trust, or just as a tool people can run on their own? If this tool doesn't exist, would we like it to?

[dpc]

I was lame, I did it by hand and I just subscribed to RustSec git repo and manually generate advisories at my leisure. I agree that having an automated way to do it would much, much better. On the other hand - they sometimes make mistakes, assign IDs after a time, etc. so manual human intervention is sometimes required anyway.