Gentoo Archives: gentoo-dev

From: Sam James <sam@g.o>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] [RFC] A new GLSA schema
Date: Fri, 11 Nov 2022 22:40:37
Message-Id: 62C57F52-AAF6-4105-9276-EA5CAAEABB7E@gentoo.org
In Reply to: Re: [gentoo-dev] [RFC] A new GLSA schema by Gordon Pettey
1 > On 11 Nov 2022, at 22:06, Gordon Pettey <petteyg359@×××××.com> wrote:
2 >
3 > On Thu, Nov 10, 2022 at 6:27 PM John Helmert III <ajak@g.o> wrote:
4 > On Thu, Nov 10, 2022 at 09:49:27PM +0100, Jonas Stein wrote:
5 > > On 10/11/2022 03:27, John Helmert III wrote:
6 > > > The first GLSA in glsa.git is GLSA-200310-03, the third GLSA of
7 > > > October 2003. It used roughly the same format of the GLSAs we release
8 > > > today, in 2022, making that format almost as old as me.
9 > >
10 > > IFF we change the format, we should not invent a new standard [1] but
11 > > use existing one like CSAF [2]
12 > >
13 > > [1] https://imgs.xkcd.com/comics/standards.png
14 > > [2] https://oasis-open.github.io/csaf-documentation/
15 >
16 > We're not inventing a new "standard", we're upgrading the format we use
17 > to distribute GLSAs.
18 >
19 > Standard, format, semantics. You are producing a new schema in a field where at least one usable (and already-improved?) schema exists. NIH?
20
21 Can you point to a format which would support using our ebuild operators
22 & syntax rather than making a (very) vague suggestion?
23
24 See also ajak's point about being the one to implement it, in lieu
25 of volunteers.

Attachments

File name MIME type
signature.asc application/pgp-signature

Replies

Subject Author
Re: [gentoo-dev] [RFC] A new GLSA schema Sam James <sam@g.o>