go
go copied to clipboard
x/vuln/osv: advisory URL should be in top-level database_specific field
Currently, the Go advisory URL is published under affected.database_specific.url
in OSV. It should instead be published under the top-level database_specific.url
field, because it applies to the whole vulnerability.
Change https://go.dev/cl/454556 mentions this issue: osv: add top-level DatabaseSpecific field
Change https://go.dev/cl/454558 mentions this issue: internal/database: move URL to top-level database_specific field