The future of the vulnerability roundups

[JosW]

@henrirosten

Here’s one tool we wrote recently for something similar: GitHub - tiiuae/sbomnix: sbomnix is a utility that generates SBOMs from nix packages

Did you ever got some input on the above great work you’re doing and the question?
Might become more relevant since this announcement?:

Vulnix: New maintainer needed

Unfortunatly, I don’t have time to continue the maintainership of vulnix nor am I able to prepare any more vulnerability roundups. We have had some discussions at last year’s NixCon but they did not result in an actionable plan. So I reach out to the community today if someone would be willing to take over. Big thanks to everyone who contributed suggestions, feature requests and patches. And apologies that I was not able to take care of them appropriately during the last year or so. Vulnix ma…