fedcode-next: New and updated schemas to store enriched vulnerability data in FederatedCode #67

Activity

1. pombredanne

   added this to 00-AboutCodePlanneron Jul 22, 2025
2. ziadhany commented on Aug 16, 2025

   

   ziadhany

   on Aug 16, 2025

   Member

   More actions

   @pombredanne Can you clarify what exactly we need to update in order to store enriched vulnerability data in the FederatedCode model?
   Currently, we are only storing the VCID, which points to a file in a Git repository, and we track all file changes using Git.

   Do we need to create or update the data schemas and models to store the full vulnerability data records?

   My thought is that we are storing the enriched vulnerability data through a FederatedCode curation review. Then, once a vulnerability review is accepted and the PR is merged into VulnerableCode-data, FederatedCode could federate the changes. Finally, we could make VulnerableCode import this enriched data with high-trust importer/improver.
3. keshav-space

   moved this to Needs prep in 00-AboutCodePlanneron Mar 16, 2026
4. keshav-space

   self-assigned this

   on Mar 19, 2026
5. TG1999

   moved this from Needs prep to In progress in 00-AboutCodePlanneron Apr 9, 2026
6. keshav-space

   added 3 commits that reference this issue on Jul 30, 2026

   feat: add schema for federated advisory data

   ...

   79fccfe

   feat: add schema for federated advisory data

   ...

   a09ad2d

   feat: add schema for federated advisory data

   ...

   492e165
7. keshav-space

   closed this as completedin vulnerablecode#2401on Jul 30, 2026
8. github-project-automation

   moved this from In progress to Done in 00-AboutCodePlanneron Jul 30, 2026
9. pombredanne commented on Aug 3, 2026

   

   pombredanne

   on Aug 3, 2026

   MemberAuthor

   More actions

   This is done.
   The corresponding pull request is at:

   • Add schema for federated advisory data  vulnerablecode#2401

   The JSON schema is at:

   • https://github.com/aboutcode-org/vulnerablecode/blob/main/docs/source/schemas/vulnerablecode-advisory.schema-0.1.json

   Note that we use the draft-07 version JSON schema for maximum compatibility with tools.
10. pombredanne

    moved this from Done to Reviewed in 00-AboutCodePlanneron Aug 3, 2026
11. pombredanne

    moved this from Reviewed to Done in 00-AboutCodePlanneron Aug 3, 2026
12. pombredanne

    moved this from Done to Reviewed in 00-AboutCodePlanneron Aug 3, 2026
13. pombredanne

    moved this from Reviewed to Done in 00-AboutCodePlanneron Aug 3, 2026
14. pombredanne

    moved this from Done to Reviewed in 00-AboutCodePlanneron Aug 3, 2026
15. pombredanne

    moved this from Reviewed to Validated in 00-AboutCodePlanneron Aug 5, 2026