hsec-sync: Synchronize with the Haskell security advisory database

[ bsd3, data, library, program ] [ Propose Tags ] [ Report a vulnerability ]

Synchronize with the Haskell security advisory database.


[Skip to Readme]

Modules

[Index] [Quick Jump]

Downloads

Maintainer's Corner

Package maintainers

For package maintainers and hackage trustees

Candidates

  • No Candidates
Versions [RSS] 0.1.0.0, 0.2.0.2
Change log CHANGELOG.md
Dependencies aeson (>=2.0.1.0 && <3), base (>=4.14 && <5), bytestring (>=0.10 && <0.13), directory (>=1.3 && <1.4), either (>=5.0 && <5.1), extra (>=1.7 && <1.9), filepath (>=1.4 && <1.6), hsec-core (>=0.2 && <0.3), hsec-sync, http-client (>=0.7.0 && <0.8), lens (>=5.1 && <5.4), optparse-applicative (>=0.17 && <0.19), tar (>=0.5 && <0.7), temporary (>=1 && <2), text (>=1.2 && <3), time (>=1.9 && <1.15), transformers (>=0.5 && <0.7), wreq (>=0.5 && <0.6), zlib (>=0.6 && <0.8) [details]
Tested with ghc ==8.10.7 || ==9.0.2 || ==9.2.8 || ==9.4.8 || ==9.6.6 || ==9.8.3 || ==9.10.1 || ==9.12.1
License BSD-3-Clause
Author Gautier DI FOLCO
Maintainer gautier.difolco@gmail.com
Category Data
Uploaded by gdifolco at 2025-07-24T06:52:04Z
Distributions
Executables hsec-sync
Downloads 61 total (5 in the last 30 days)
Rating (no votes yet) [estimated by Bayesian average]
Your Rating
  • λ
  • λ
  • λ
Status Docs available [build log]
Last success reported on 2025-07-24 [all 1 reports]

Readme for hsec-sync-0.2.0.2

[back to package description]

hsec-sync

Synchronize with the Haskell advisories database.

Building

We aim to support both regular cabal-based and nix-based builds.

Design

hsec-tools is the main entry point for dealing with security advisories.

Libraries implementors and services providers will mainly be interested by Security.Advisories.Queries and hsec-tools query which allows querying against a directory containing the advisories.

There are two ways for maintaining this local directory up-to-date:

  • Manually (based on git of fetching archive from GitHub)
  • Relying on hsec-sync (either via Security.Advisories.Sync.sync or hsec-sync sync)

overview

The recommended workflow is:

  1. Use hsec-sync to ensure having an up-to-date advisories directory (created or updated)
  2. Use hsec-tools to perform queries against it

recommended-workflow