Skip to content

Advisory Creation WORKFLOW Loose-Ends #1133

Description

@jasnow

Advisory Creation WORKFLOW Loose-Ends

  • AUTOMATED or PRE-CHECK
    • Redo PR#1079 (Add title and description lline length check) (UPDATE: PR#1135/Canceled/Deferrred)
    • Check for more automated field checks.
    • Future of kwalify gem (Keep for now)
  • MANUAL STEPS

NOTE: Expect to keep current for now.

Activity

  1. self-assigned this
    on Jun 21, 2026
  2. jasnow commented on Jun 22, 2026

    @jasnow
    MemberAuthor
  3. changed the title [-]Advisory Upfront WORKFLOW Loose-Ends[/-] [+]RAD Advisory Creation WORKFLOW Loose-Ends[/+] on Jun 22, 2026
  4. jasnow commented on Jun 23, 2026

    @jasnow
    MemberAuthor

    FYI: Advisories are getting longer description field with more sections.
    Probably need to flag ## Details section etc just like POC.

  5. changed the title [-]RAD Advisory Creation WORKFLOW Loose-Ends[/-] [+]Advisory Creation WORKFLOW Loose-Ends[/+] on Jun 26, 2026
  6. jasnow commented on Jul 9, 2026

    @jasnow
    MemberAuthor

    Checked EUVD database this morning for "ruby" or "rubygem" advisories - found 33 - already had 21 - looks at the 12 "new" - 4 really there and 8 "not gems".

  7. jasnow commented on Jul 14, 2026

    @jasnow
    MemberAuthor

    Currently checking gem projects' "security/advisories" for missing advisories.

  8. jasnow commented on Jul 28, 2026

    @jasnow
    MemberAuthor

    Yesterday found GHSL advisories yesteray - see PR#1187 for details

    • Found 1 non-gem advisory - updated rad-ignores.sh file.
    • Added to 5 existing advisories.
    • Skipped 3 GHSL advisories because of unclear release.
  9. jasnow commented on Aug 2, 2026

    @jasnow
    MemberAuthor

    Getting tired of touching advisories twice when filenames changes. 22 days before my version and global GHSA version.

  10. locked and limited conversation to collaborators on Aug 25, 2026
  11. converted this issue into a discussion #1224 on Aug 25, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions