From 1855659e3e45d62ebc555e0e0def36b7621166cd Mon Sep 17 00:00:00 2001 From: TooFastTooCurious Date: Fri, 24 Apr 2026 09:17:15 -0400 Subject: [PATCH] Switch advisory remoteURL to advisories.juliet.sh The advisory DB is now published to GitHub Pages with a custom domain (advisories.juliet.sh) served from the abom-advisories repo. Switching remoteURL to that endpoint gets us: - A CDN-cached endpoint (raw.githubusercontent.com has tighter rate limits that abom can hit under heavy CI use) - A stable URL independent of hosting location, so we can move off GitHub Pages later without breaking abom installs The Pages-served JSON is byte-identical to the existing db/advisories.json on main; compile output matches the static file. --- pkg/advisory/advisory.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pkg/advisory/advisory.go b/pkg/advisory/advisory.go index df55211..b56443e 100644 --- a/pkg/advisory/advisory.go +++ b/pkg/advisory/advisory.go @@ -14,7 +14,7 @@ import ( ) const ( - remoteURL = "https://raw.githubusercontent.com/JulietSecurity/abom-advisories/main/db/advisories.json" + remoteURL = "https://advisories.juliet.sh/db/advisories.json" cacheTTL = 1 * time.Hour fetchTimeout = 5 * time.Second