Nixos-vex: triage vulnerabilities in NixOS

The last few months I have experimented with the available tools in the ecosystem to triage vulnerabilities in NixOS. Initially just for my homelab, last week, I open sourced the relevant pieces as: GitHub - datosh/nixos-vex: OpenVEX feed and NixOS module to manage NixOS CVEs, evaluated against your system's configuration. · GitHub What I do is to create VEX statements from your system configuration, so the triage feed is not static, but based on your configuration. I have written about the app...