Greg Kroah-Hartman
Greg Kroah-Hartman
On Fri, May 24, 2024 at 03:17:47AM -0700, Frank Dana wrote: > @gregkh Ping? I'm sure usbview is relatively low-priority, and there's certainly no real urgency to this. Just wanted...
Sorry for the delay, thanks for doing this!
Seems sane to me, nice discussion! But really you should ask Jason as he's the random maintainer and did all the work in the past few years on that codebase...
OSV is much more limited in detail than what is available in other formats already (it's a meta-grouping of external reports), so why would you want people to move to...
CVE's schema is here https://github.com/CVEProject/cve-schema
> > OSV is much more limited in detail than what is available in other formats already (it's a meta-grouping of external reports), so why would you want people to...
CVE says they have funding for a year, so what specifically are people worried about with regards to this? Worst case, all CNA's just pre-allocate a bunch of ids (like...
The .spdx file is auto-generated by the `reuse` tool, we don't go and modify it by hand. So any changes done here would be overwritten the next time we update...
Yes, the `.spdx` file needs to be generated all the time, but really, I only do it when a release happens as that's the only important time it is needed....
Thanks for the discussion, I'll take this for now and hopefully notice when/if it gets auto-regenerated by reuse in the future. And when configure goes away, we'll still need to...