ghsa-db
backlog row · status candidate · category SEC (Security advisories & identifiers) · lane B · refresh weekly
What an agent uses it for
an agent auditing dependencies across ecosystems queries this for GitHub-reviewed advisories with CVSS and patched ranges
Use it
xerj corpus add --from https://raw.githubusercontent.com/xerj-org/xerj/corpus-hub/tools/xerj-code/hub/ghsa-db.jsonxerj corpus index ghsa-db → xerj code ghsa-db "your question"Sources & pins
| source | pin | licence | size | review note |
|---|---|---|---|---|
| https://github.com/github/advisory-database | recipe | ? | curated pack | CC-BY-4.0 (verify at pin) |
— across — · added —
Rights
? — see per-source review blocks . The review block records a human opening each licence file at the pin; detector output is a hint, never the verdict.
Retrieval spot-check (G7)
not yet spot-checked; queries are pre-registered in the registry before grading.