data: map publications to personas, problems, and project relationships - #42
Open
eddie-knight wants to merge 1 commit into
Open
eddie-knight wants to merge 1 commit into
eddie-knight wants to merge 1 commit into
Conversation
Publications rendered persona/problem sections and relationship edges identically to projects since the 4P's reorg, but most of the data feeding those sections was missing. This fills the gaps: - needs-review produces/consumes/implements edges touching sbom, vex, osv-record, in-toto-attestation, and osps-baseline, authored on the declaring records (bomctl, protobom, sbomit, GUAC, Zarf, Minder, Package Analysis, OSV/OpenVEX) - curator-drafted persona and problem mappings for the six externally-owned specs in data/definitions/publications.yml - a derived 'Published by' list on /publications/security-insights/, built from each record's own insights: link rather than authored edges, so the fact stays stated in one place Signed-off-by: Eddie Knight <knight@linux.com>
SecurityCRob
approved these changes
Sep 18, 2026
SecurityCRob
left a comment
SecurityCRob
left a comment
Contributor
There was a problem hiding this comment.
good stuff! thank you!!!!!!!!
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Publications rendered persona/problem sections and relationship edges identically to projects since the 4P's reorg, but most of the data feeding those sections was missing.
This is not intended to get anything across the finish line, but fills some of the gaps: