flora-server
flora-server copied to clipboard
Store HSEC advisories in the database
We can use the cabal-audit library to fetch the latest advisories, then parse the files.
We will need a new table called security_advisories
, to store normalised informations about the advisory. Most, if not all of the information contained in the OVS file should be stored, and references to versions should be stored as foreign keys. It's mostly "introduced", "fixed" and the numbers that we can link to https://osv.dev & company.