Collect xen

[pombredanne]

https://xenbits.xen.org/xsa/

[Pushpit07]

What should be the format for data collection?

[Pushpit07]

I was writing a script to collect xen. Had a few questions in mind. What data needs to be specifically collected from https://xenbits.xen.org/xsa/ ?

Do we just collect the CVE column and advisory, or anything else too?

[Pushpit07]

@sbs2001 ping

[pombredanne]

@Pushpit07 is there a better way than to scrape HTML? may be another source for the same data?
I can read on the page

A JSON document listing advisories is also available.
with a link to https://xenbits.xen.org/xsa/xsa.json which is a nicely structure JSON file

The file seems to contain everything the HTML does have. And this not trivial (there are various Package URLs we could infer for xen or linux for instance)

[Pushpit07]

Yes, this json seems nicely structured. We can use it directly to collect data.
Working on it

[Hritik14]

License: GPL. See: https://github.com/nexB/vulnerablecode/pull/464/files#r640741412

[Hritik14]

The work was partial, this needs to be refactored and migrated to importer improver structure