x/vuln: expose vulnerability feed as rss

[eltonsv]

I was wondering if we could also utilize the updates from https://pkg.go.dev/vuln/ via RSS so that we are notified instantly of new CVEs pertaining to Go.

[seankhliao]

is this actually useful though? these are vulnerabilities for anything written in go, not just the things you actually use.

[dmitshur]

CC @golang/vulndb.

[zpavlinovic]

Is this issue more appropriate for x/vulndb? I believe this is out of scope of both x/vuln and x/vulndb.

[eltonsv]

Yeah, I agree; I feel its directed for the folks maintaining the website if its possible to expose the contents as an RSS feed;

I just felt the use case of knowing the latest go CVEs listed via RSS so that people can subscribe to it would make a broader set of folks also interested in the possible vulnerabilities, even if it might not be applicable in their codebase via govulncheck reporting them. But yeah, feel free to close this issue if the folks in the team feel its not an apt possible feature to address.

[dmitshur]

@zpavlinovic This issue is closed as "completed", is that the right status? Or should it be closed as "not planned"?