Skip to content

Comments

Add MinimOS ecosystem#351

Merged
another-rex merged 2 commits intoossf:mainfrom
bearjah:add-minimos-ecosystem
May 5, 2025
Merged

Add MinimOS ecosystem#351
another-rex merged 2 commits intoossf:mainfrom
bearjah:add-minimos-ecosystem

Conversation

@bearjah
Copy link
Contributor

@bearjah bearjah commented Apr 29, 2025

@another-rex another-rex requested a review from oliverchang April 29, 2025 23:43
Copy link
Collaborator

@oliverchang oliverchang left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

thanks! this LGTM, but I do have a question also

| `Linux` | The Linux kernel. The only supported `name` is `Kernel`. |
| `Mageia` | The Mageia Linux package ecosystem; the `name` is the name of the source package. The ecosystem string must have a `:<RELEASE-NUMBER>` suffix to scope the package to a particular Mageia release. Eg `Mageia:9`. |
| `Maven` | The Maven Java package ecosystem. The `name` field is a Maven package name in the format `groupId:artifactId`. The ecosystem string might optionally have a `:<REMOTE-REPO-URL>` suffix to denote the remote repository URL that best represents the source of truth for this package, without a trailing slash (e.g. `Maven:https://maven.google.com`). If this is omitted, this is assumed to be the Maven Central repository (`https://repo.maven.apache.org/maven2`). |
| `MinimOS` | The MinimOS package ecosystem; the `name` is the name of the package. |
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

are there more specifics on how MinimOS refers to package?

e.g. in other distros, there's often a distinction between binary and source package names.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It's similar to Alpine but version less. there is no distinction between binary and source package names.

@bearjah bearjah force-pushed the add-minimos-ecosystem branch from 7ef0cd7 to 14935ee Compare May 5, 2025 11:04
Signed-off-by: Amit Berman <amit@minimus.io>
@bearjah bearjah force-pushed the add-minimos-ecosystem branch from 14935ee to ecea405 Compare May 5, 2025 11:05
@another-rex another-rex force-pushed the add-minimos-ecosystem branch from 62fac11 to 1eceb0c Compare May 5, 2025 14:32
Signed-off-by: Rex P <rexpan@google.com>
@another-rex another-rex force-pushed the add-minimos-ecosystem branch from 1eceb0c to d8a934b Compare May 5, 2025 14:34
@another-rex another-rex merged commit 2b98612 into ossf:main May 5, 2025
4 checks passed
progval added a commit to progval/osv that referenced this pull request Dec 19, 2025
progval added a commit to progval/osv that referenced this pull request Dec 19, 2025
progval added a commit to progval/osv that referenced this pull request Dec 19, 2025
progval added a commit to progval/osv that referenced this pull request Dec 19, 2025
Includes:

* 1.7.0:
  * ossf/osv-schema#312 (`upstream` field)
  * ossf/osv-schema#319
  * ossf/osv-schema#337 (`Ubuntu` as `severity` score)
* 1.7.1: nothing
* 1.7.2:
  * ossf/osv-schema#351
  * ossf/osv-schema#347
  * ossf/osv-schema#358
* 1.7.3:
  * ossf/osv-schema#394
* 1.7.4: ossf/osv-schema#434
  * ossf/osv-schema#357
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants