Alexis Mousset

Result in https://github.com/rustsec/advisory-db/pull/1379. Refs: https://github.com/rustsec/rustsec/issues/644

As discussed on Zulip previously, adding the ability to provide a specific license and attribution for advisories would be useful, especially to allow importing advisories from Github Security Database (under...

Fixes #23356: Add PoC SBOM tooling

2

https://issues.rudder.io/issues/23356

Fixes #23626: Add a "package" module

2

https://issues.rudder.io/issues/23626

https://issues.rudder.io/issues/21898

Fixes #23806: Add Amazon Linux in the technique editor conditions

1

https://issues.rudder.io/issues/23806

Fixes #23208: Add a warning in the logs when using local auth with non-bcrypt passwords

1

https://issues.rudder.io/issues/23208 * Remove the ability to use the fallback admin account with a clear text password in config * Add a warn log when local users use an unsafe storage

https://issues.rudder.io/issues/22666

As discussed in https://github.com/rustsec/advisory-db/pull/1738#issuecomment-1684483582, issuing an `informational="notice"` advisory would cause alerts similar to actual vulnerabilities in some cases, which is undesirable and prevents using this type of advisory in some...

Import missing advisories from GitHub advisories

1

Currently 92 missing advisories: * [ ] 2021-09-01: https://github.com/advisories/GHSA-hw4v-5x4h-c3xm for ["frontier"] * [ ] 2021-09-20: https://github.com/advisories/GHSA-mc22-5q92-8v85 for ["tremor-script"] * [ ] 2021-09-23: https://github.com/advisories/GHSA-xpwj-7v8q-mcgj for ["deno"] * [ ] 2021-10-12: https://github.com/advisories/GHSA-3r3g-g73x-g593...