Find a more disctinctive name for "Nix security issue" #176

New issue

Open

opened 2024-09-23 10:07:00 +00:00 by fricklerhandwerk · 3 comments

fricklerhandwerk commented

2024-09-23 10:07:00 +00:00

(Migrated from github.com)

Our main data object is what we currently call an "issue", but this is confusing if you don't know how the system works.

Really what it is is a record that maps a CVE to a Nixpkgs attribute set that encodes a package.

Come up with a better name to establish across the code and documentation.

Our main data object is what we currently call an "issue", but this is confusing if you don't know how the system works. Really what it is is a record that maps a CVE to a Nixpkgs attribute set that encodes a package. Come up with a better name to establish across the code and documentation.

fricklerhandwerk commented

2024-09-27 09:10:35 +00:00

(Migrated from github.com)

What about:

vulnerability record
security ticket

What about: - vulnerability record - security ticket

erictapen commented

2024-10-01 12:36:47 +00:00

(Migrated from github.com)

I'd like to find a name here, that describes our role in the data flow:

We ingest CVEs
enrich them with metadata like affected packages, comments, etc) if it seems relevant
eventually turn it into a Nixpkgs GitHub issue if we are convinced they pose a security issue

At the same time it would be nice to have something that explains itself when seen in the wild without further context. So it should be obvious from first glance that it is about Nix and Security.

What comes to my mind here:

Nix Security Hunch
Nix Security Candidate
Nix Security Suspect

I'd like to find a name here, that describes our role in the data flow: - We ingest CVEs - enrich them with metadata like affected packages, comments, etc) *if it seems relevant* - eventually turn it into a Nixpkgs GitHub issue *if we are convinced they pose a security issue* At the same time it would be nice to have something that explains itself when seen in the wild without further context. So it should be obvious from first glance that it is about **Nix** and **Security**. What comes to my mind here: - Nix Security Hunch - Nix Security Candidate - Nix Security Suspect

fricklerhandwerk commented

2025-04-29 09:20:16 +00:00

(Migrated from github.com)