ArchLinux advisories

[noraj]

Any plan to add support for ArchLinux?

• AVG : ArchLinux Vulnerability Group - https://security.archlinux.org/
• ASA : ArchLinux Security Advisory - https://security.archlinux.org/advisory

[oliverchang]

Thanks for filing this issue. We typically depend on the upstream sources to adopt the OSV schema so that we can ingest it into our DB.

@andrewpollock @hogo6002 should we try reaching out to Arch Linux here?

[noraj]

I don't know what public sources are available outside this RSS feed.

If you need to contact the AL security team, here are some pointers.

[andrewpollock]

https://wiki.archlinux.org/title/Arch_Security_Team#Team_members looks like the individuals to try and make initial contact with.

I'll drop the ones I can identify email addresses for a quick note pointing them at this issue.

[github-actions]

This issue has not had any activity for 60 days and will be automatically closed in two weeks

See https://github.com/google/osv.dev/blob/master/CONTRIBUTING.md for how to contribute a PR if you're interested in helping out.

[noraj]

@andrewpollock Did you get some answers from the AL team?

[andrewpollock]

@noraj no, I haven't heard back from anyone that I reached out to over email from https://wiki.archlinux.org/title/Arch_Security_Team#Team_members

[andrewpollock]

We eventually got a response from them, and they seem to be under-resourced to do the engineering work on their end to do what's necessary to make the data available. Discussions are ongoing, though.

[github-actions]

This issue has not had any activity for 60 days and will be automatically closed in two weeks

See https://github.com/google/osv.dev/blob/master/CONTRIBUTING.md for how to contribute a PR if you're interested in helping out.

[github-actions]

Automatically closing stale issue