Set published date to issued date in OSV data

Open andrewpollock opened this issue 1 year ago • 2 comments

Hello,

@jayvdb reported https://github.com/google/osv.dev/issues/2843 to OSV.dev, but it's really an issue with the source data as published in the RUST Advisory Database, so I wanted to have the discussion on an issue here.

Nov 11 '24 00:11 andrewpollock

The only place we currently collect this information is in the git history at the time advisories are issued a RUSTSEC ID.

Perhaps we can add a field for it and start collecting it explicitly.

Nov 11 '24 18:11 tarcieri

We could make the ID assigner fill in the date. That would be more robust and also less work for the maintainers.

Nov 11 '24 18:11 Shnatsel