Import Ubuntu OSV data #1827

Activity

1. kunalsz commented on Mar 21, 2025

   

   kunalsz

   on Mar 21, 2025

   More actions

   @pombredanne isn't this license here https://github.com/canonical/ubuntu-security-notices/blob/main/LICENSE enough to allow us to use the advisory data ? But GPL licensing is done for software not data, using GPL might require us to refactor VulnerableCode's license also as GPL.
2. pombredanne commented on Jun 2, 2025

   

   pombredanne

   on Jun 2, 2025

   MemberAuthor

   More actions

   @kunalsz per canonical/ubuntu-security-notices#5 (comment)

   @pombredanne we already discussed this with @oliverchang and legal, and GPL doesn't apply to data, but only to the scripts in this repo.

   regarding clarifying it, I will discuss with the rest of the team about it, we will update this PR when done

   In all cases, the license should not be in the way to writing the code to fetch the data unless the license would prohibit that, which is not the case.
3. pombredanne commented on Jun 2, 2025

   

   pombredanne

   on Jun 2, 2025

   MemberAuthor

   More actions

   Note also that https://github.com/canonical/ubuntu-security-notices/ now has three formats, and include PURLs in most cases! ( @dodys thank you for that! ❤ )
4. ziadhany

   added

   Data collection

   good first issue

   on Feb 2, 2026
5. keshav-space

   linked a pull request that will close this issueAdd v2 pipeline to collect Ubuntu OSV advisories #2145on Feb 5, 2026
6. keshav-space

   closed this as completedin #2145on Feb 6, 2026