镜像站点 · 本页由第三方 GitHub 只读镜像提供，非 GitHub 官方站点，不接受任何登录或凭据输入。前往 github.com
Skip to content

Add improver to validate that collected purl are real. #644

Closed
#1533
Closed
Add improver to validate that collected purl are real.#644
#1533
Assignees
keshav-space
Labels
1-next

Description

@pombredanne
pombredanne
opened on Mar 12, 2022

There are a few ghost/junk packages referenced in GH "reviewed" advisories ... We should an improver that would validate that the referenced packages actually exist. Otherwise we are propagating junk. See https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/09/GHSA-2ghc-6v89-pw9j/GHSA-2ghc-6v89-pw9j.json ... found by @ziadhany in #632

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

1-next

Type

No type

Projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions