Skip to content

Add Root as official data source with ROOT-OS and ROOT-APP prefixes #459

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
chait-slim wants to merge 2 commits into
base: main
Choose a base branch
from
Open

Add Root as official data source with ROOT-OS and ROOT-APP prefixes #459

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
b8b1209
Add Root as official data source with ROOT-OS and ROOT-APP prefixes
chait-slim Nov 25, 2025
5b1055d
Add ecosystem
chait-slim Nov 26, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,6 +27,7 @@ This format is currently exported by:
- [RConsortium Advisory Database](https://github.com/RConsortium/r-advisory-database)
- [Red Hat](https://security.access.redhat.com/data)
- [Rocky Linux](https://distro-tools.rocky.page/apollo/openapi/#osv)
- [Root](https://api.root.io/external/osv/all.json)
Copy link
Collaborator

@another-rex another-rex Nov 25, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This should be linking to a human readable documentation or webpage.

Copy link
Author

@chait-slim chait-slim Nov 26, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can you elaborate on this please? Looking at other entries here like: MinimOS, Chainguard and Echo, it looks like they have the same type of link, but I might be missing the intention here

Copy link
Collaborator

@another-rex another-rex Dec 8, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It's not a strict requirement, but most links here links to a readme or intro of some kind that's more human friendly so that if folks are interested in a project, they can click on the link and see what they are and how they are publishing OSVs. If you folks do not have this kind of page, feel free to leave it as is.

- [Rust Advisory Database](https://github.com/RustSec/advisory-db)
- [SUSE](https://www.suse.com/support/security/)
- [Ubuntu](https://github.com/canonical/ubuntu-security-notices/)
Expand Down
11 changes: 11 additions & 0 deletions docs/schema.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -531,6 +531,17 @@ The defined database prefixes and their "home" databases are:
</ul>
</td>
</tr>
<tr>
<td><code>ROOT-OS</code>/<code>ROOT-APP</code></td>
<td><a href="https://api.root.io/external/osv/all.json">Root Security Advisories</a></td>
<td>
<ul>
<li>How to contribute: TBD</li>
<li>Source URL: <code>TBD</code></li>
<li>OSV Formatted URL: <code>https://api.root.io/external/osv/all.json</code></li>
</ul>
</td>
</tr>
<tr>
<td><code>RUSTSEC</code></td>
<td><a href="https://github.com/rustsec/advisory-db">RustSec Advisory Database</a></td>
Expand Down
2 changes: 1 addition & 1 deletion validation/schema.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -388,7 +388,7 @@
"type": "string",
"title": "Currently supported home database identifier prefixes",
"description": "These home databases are also documented at https://ossf.github.io/osv-schema/#id-modified-fields",
"pattern": "^(ASB-A|PUB-A|ALPINE|ALSA|ALBA|ALEA|BELL|BIT|CGA|CURL|CVE|DEBIAN|DRUPAL|DSA|DLA|ELA|DTSA|ECHO|EEF|FreeBSD|GHSA|GO|GSD|HSEC|JLSEC|KUBE|LBSEC|LSN|MAL|MINI|MGASA|OESA|OSV|openSUSE-SU|PHSA|PSF|PYSEC|RHBA|RHEA|RHSA|RLSA|RXSA|RSEC|RUSTSEC|SUSE-[SRFO]U|UBUNTU|USN|V8)-"
"pattern": "^(ASB-A|PUB-A|ALPINE|ALSA|ALBA|ALEA|BELL|BIT|CGA|CURL|CVE|DEBIAN|DRUPAL|DSA|DLA|ELA|DTSA|ECHO|EEF|FreeBSD|GHSA|GO|GSD|HSEC|JLSEC|KUBE|LBSEC|LSN|MAL|MINI|MGASA|OESA|OSV|openSUSE-SU|PHSA|PSF|PYSEC|RHBA|RHEA|RHSA|RLSA|RXSA|RSEC|ROOT-OS|ROOT-APP|RUSTSEC|SUSE-[SRFO]U|UBUNTU|USN|V8)-"
},
"severity": {
"type": [
Expand Down