Merged
Conversation
oliverchang
approved these changes
May 1, 2025
Collaborator
oliverchang
left a comment
There was a problem hiding this comment.
thanks! this LGTM, but I do have a question also
| | `Linux` | The Linux kernel. The only supported `name` is `Kernel`. | | ||
| | `Mageia` | The Mageia Linux package ecosystem; the `name` is the name of the source package. The ecosystem string must have a `:<RELEASE-NUMBER>` suffix to scope the package to a particular Mageia release. Eg `Mageia:9`. | | ||
| | `Maven` | The Maven Java package ecosystem. The `name` field is a Maven package name in the format `groupId:artifactId`. The ecosystem string might optionally have a `:<REMOTE-REPO-URL>` suffix to denote the remote repository URL that best represents the source of truth for this package, without a trailing slash (e.g. `Maven:https://maven.google.com`). If this is omitted, this is assumed to be the Maven Central repository (`https://repo.maven.apache.org/maven2`). | | ||
| | `MinimOS` | The MinimOS package ecosystem; the `name` is the name of the package. | |
Collaborator
There was a problem hiding this comment.
are there more specifics on how MinimOS refers to package?
e.g. in other distros, there's often a distinction between binary and source package names.
Contributor
Author
There was a problem hiding this comment.
It's similar to Alpine but version less. there is no distinction between binary and source package names.
7ef0cd7 to
14935ee
Compare
Signed-off-by: Amit Berman <amit@minimus.io>
14935ee to
ecea405
Compare
62fac11 to
1eceb0c
Compare
Signed-off-by: Rex P <rexpan@google.com>
1eceb0c to
d8a934b
Compare
1 task
progval
added a commit
to progval/osv
that referenced
this pull request
Dec 19, 2025
Includes: * 1.6.6: ossf/osv-schema#276 * 1.6.7: nothing * 1.7.0: ossf/osv-schema#312 ossf/osv-schema#319 ossf/osv-schema#337 * 1.7.1: nothing * 1.7.2: ossf/osv-schema#351 ossf/osv-schema#347 ossf/osv-schema#358 * 1.7.3: ossf/osv-schema#394 * 1.7.4: ossf/osv-schema#434 ossf/osv-schema#357
progval
added a commit
to progval/osv
that referenced
this pull request
Dec 19, 2025
Includes: * 1.6.6: ossf/osv-schema#276 * 1.6.7: nothing * 1.7.0: ossf/osv-schema#312 ossf/osv-schema#319 ossf/osv-schema#337 * 1.7.1: nothing * 1.7.2: ossf/osv-schema#351 ossf/osv-schema#347 ossf/osv-schema#358 * 1.7.3: ossf/osv-schema#394 * 1.7.4: ossf/osv-schema#434 ossf/osv-schema#357
progval
added a commit
to progval/osv
that referenced
this pull request
Dec 19, 2025
Includes: * 1.7.0: ossf/osv-schema#312 (`upstream` field) ossf/osv-schema#319 ossf/osv-schema#337 (`Ubuntu` as `severity` score) * 1.7.1: nothing * 1.7.2: ossf/osv-schema#351 ossf/osv-schema#347 ossf/osv-schema#358 * 1.7.3: ossf/osv-schema#394 * 1.7.4: ossf/osv-schema#434 ossf/osv-schema#357
progval
added a commit
to progval/osv
that referenced
this pull request
Dec 19, 2025
Includes: * 1.7.0: * ossf/osv-schema#312 (`upstream` field) * ossf/osv-schema#319 * ossf/osv-schema#337 (`Ubuntu` as `severity` score) * 1.7.1: nothing * 1.7.2: * ossf/osv-schema#351 * ossf/osv-schema#347 * ossf/osv-schema#358 * 1.7.3: * ossf/osv-schema#394 * 1.7.4: ossf/osv-schema#434 * ossf/osv-schema#357
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
ref: google/osv.dev#3400