ex-security-advisory / api Goto Github PK

Default Domain: https://elixiradvisories.org/

Redirects:

• https://www.elixiradvisories.org/
• https://elixiradvisories.com/
• https://www.elixiradvisories.com/

Also redirect non-tls to tls.

Think about a good name & Domain for this project.

Currently the subscription tests are failing often. THis needs to be solved and the subscriptions tested properly.

As discussed in #1 (comment)

This ticket is supposed to be the base for the discussion of the scope of V1. Please write here if you've questions/ideas/improvements.

Hosting is needed for the API as soon as it is ready. Someone like Gigalixir could potentially be interested to sponsor this.

Provide a CLI client to audit the current mix.lock for vulnerabilities.

As discussed on #1 (comment)

• Authentication via GitHub
• Webhook Management Interface
• Store WebHooks in Postgres
• Use https://github.com/camirmas/grapple for WebHook calling

Webhook Types (only generic, none for specific vulnerability / package):

• New Vulnerability
• New Package
• Vulnerability Change

Make the HTML pages look nice & explain what the project is doing. Point users to the coming #3 cli client and to the advisory git repo to submit new vulnerabilities.

Mention Gigalixir that provides the hosting and AppSignal for the monitoring in Footer & README.

As discussed in #1 (comment)