{
  "generatedAt": "2026-05-05T21:20:13.760Z",
  "sourceOfTruth": "sources.yaml",
  "note": "Security registry is local metadata only. It does not fetch external sources.",
  "policy": {
    "rawPayloadPublic": false,
    "automatedExternalFetchRequiresApproval": true,
    "highRiskPublicationRequiresHumanReview": true,
    "defensiveOnlySummaries": true
  },
  "totals": {
    "sources": 17
  },
  "sources": [
    {
      "id": "adobe-security-bulletins",
      "name": "Adobe Security Bulletins",
      "url": "https://helpx.adobe.com/security.html",
      "type": "official",
      "monitor": "html-diff",
      "priority": "high",
      "layers": [
        "cloud-saas",
        "cms"
      ],
      "topics": [
        "security-intelligence",
        "cms-selection"
      ],
      "defaultActionLevel": "observe",
      "publicationRiskFloor": "medium",
      "rawPayloadPublic": false,
      "automatedFetchRequiresApproval": true
    },
    {
      "id": "atlassian-security-advisories",
      "name": "Atlassian Security Advisories",
      "url": "https://www.atlassian.com/trust/security/advisories",
      "type": "official",
      "monitor": "html-diff",
      "priority": "high",
      "layers": [
        "cloud-saas"
      ],
      "topics": [
        "security-intelligence"
      ],
      "defaultActionLevel": "observe",
      "publicationRiskFloor": "medium",
      "rawPayloadPublic": false,
      "automatedFetchRequiresApproval": true
    },
    {
      "id": "aws-security-bulletins",
      "name": "AWS Security Bulletins",
      "url": "https://aws.amazon.com/security/security-bulletins/rss/",
      "type": "official",
      "monitor": "rss",
      "priority": "high",
      "layers": [
        "cloud-saas"
      ],
      "topics": [
        "security-intelligence"
      ],
      "defaultActionLevel": "observe",
      "publicationRiskFloor": "medium",
      "rawPayloadPublic": false,
      "automatedFetchRequiresApproval": true
    },
    {
      "id": "cisa-known-exploited-vulnerabilities-catalog",
      "name": "CISA Known Exploited Vulnerabilities Catalog",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "type": "official",
      "monitor": "json-api-or-html-diff",
      "priority": "high",
      "layers": [
        "global"
      ],
      "topics": [
        "security-intelligence"
      ],
      "defaultActionLevel": "review",
      "publicationRiskFloor": "medium",
      "rawPayloadPublic": false,
      "automatedFetchRequiresApproval": true
    },
    {
      "id": "cisa-known-exploited-vulnerabilities-json-feed",
      "name": "CISA Known Exploited Vulnerabilities JSON Feed",
      "url": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json",
      "type": "official",
      "monitor": "json-api",
      "priority": "high",
      "layers": [
        "global"
      ],
      "topics": [
        "security-intelligence"
      ],
      "defaultActionLevel": "review",
      "publicationRiskFloor": "medium",
      "rawPayloadPublic": false,
      "automatedFetchRequiresApproval": true
    },
    {
      "id": "debian-security-advisories",
      "name": "Debian Security Advisories",
      "url": "https://www.debian.org/security/",
      "type": "official",
      "monitor": "rss-or-html-diff",
      "priority": "high",
      "layers": [
        "os"
      ],
      "topics": [
        "security-intelligence"
      ],
      "defaultActionLevel": "observe",
      "publicationRiskFloor": "low",
      "rawPayloadPublic": false,
      "automatedFetchRequiresApproval": true
    },
    {
      "id": "drupal-security-advisories-rss",
      "name": "Drupal Security Advisories RSS",
      "url": "https://www.drupal.org/security/security/rss.xml",
      "type": "official",
      "monitor": "rss",
      "priority": "high",
      "layers": [
        "cms"
      ],
      "topics": [
        "cms-selection",
        "security-intelligence"
      ],
      "defaultActionLevel": "observe",
      "publicationRiskFloor": "medium",
      "rawPayloadPublic": false,
      "automatedFetchRequiresApproval": true
    },
    {
      "id": "google-cloud-security-bulletins",
      "name": "Google Cloud Security Bulletins",
      "url": "https://cloud.google.com/support/bulletins",
      "type": "official",
      "monitor": "xml-or-html-diff",
      "priority": "high",
      "layers": [
        "cloud-saas"
      ],
      "topics": [
        "security-intelligence"
      ],
      "defaultActionLevel": "observe",
      "publicationRiskFloor": "medium",
      "rawPayloadPublic": false,
      "automatedFetchRequiresApproval": true
    },
    {
      "id": "microsoft-security-update-guide",
      "name": "Microsoft Security Update Guide",
      "url": "https://msrc.microsoft.com/update-guide",
      "type": "official",
      "monitor": "api-or-html-diff",
      "priority": "high",
      "layers": [
        "os",
        "cloud-saas"
      ],
      "topics": [
        "security-intelligence"
      ],
      "defaultActionLevel": "observe",
      "publicationRiskFloor": "medium",
      "rawPayloadPublic": false,
      "automatedFetchRequiresApproval": true
    },
    {
      "id": "node-js-security-advisories",
      "name": "Node.js Security Advisories",
      "url": "https://nodejs.org/en/feed/vulnerability.xml",
      "type": "official",
      "monitor": "rss",
      "priority": "high",
      "layers": [
        "runtime"
      ],
      "topics": [
        "security-intelligence",
        "astro-cloudflare"
      ],
      "defaultActionLevel": "observe",
      "publicationRiskFloor": "medium",
      "rawPayloadPublic": false,
      "automatedFetchRequiresApproval": true
    },
    {
      "id": "nvd-cve-api",
      "name": "NVD CVE API",
      "url": "https://services.nvd.nist.gov/rest/json/cves/2.0",
      "type": "official",
      "monitor": "json-api",
      "priority": "high",
      "layers": [
        "global"
      ],
      "topics": [
        "security-intelligence"
      ],
      "defaultActionLevel": "review",
      "publicationRiskFloor": "medium",
      "rawPayloadPublic": false,
      "automatedFetchRequiresApproval": true
    },
    {
      "id": "osv-api",
      "name": "OSV API",
      "url": "https://api.osv.dev/v1/query",
      "type": "official",
      "monitor": "json-api",
      "priority": "high",
      "layers": [
        "dependency"
      ],
      "topics": [
        "security-intelligence"
      ],
      "defaultActionLevel": "review",
      "publicationRiskFloor": "low",
      "rawPayloadPublic": false,
      "automatedFetchRequiresApproval": true
    },
    {
      "id": "php-releases-feed",
      "name": "PHP Releases Feed",
      "url": "https://www.php.net/releases/feed.php",
      "type": "official",
      "monitor": "rss",
      "priority": "high",
      "layers": [
        "runtime"
      ],
      "topics": [
        "security-intelligence",
        "cms-selection"
      ],
      "defaultActionLevel": "observe",
      "publicationRiskFloor": "medium",
      "rawPayloadPublic": false,
      "automatedFetchRequiresApproval": true
    },
    {
      "id": "red-hat-security-data",
      "name": "Red Hat Security Data",
      "url": "https://access.redhat.com/security/data",
      "type": "official",
      "monitor": "rss-or-json-api",
      "priority": "high",
      "layers": [
        "os"
      ],
      "topics": [
        "security-intelligence"
      ],
      "defaultActionLevel": "observe",
      "publicationRiskFloor": "low",
      "rawPayloadPublic": false,
      "automatedFetchRequiresApproval": true
    },
    {
      "id": "strapi-github-releases",
      "name": "Strapi GitHub Releases",
      "url": "https://github.com/strapi/strapi/releases.atom",
      "type": "primary",
      "monitor": "atom",
      "priority": "high",
      "layers": [
        "cms"
      ],
      "topics": [
        "cms-selection",
        "security-intelligence"
      ],
      "defaultActionLevel": "observe",
      "publicationRiskFloor": "medium",
      "rawPayloadPublic": false,
      "automatedFetchRequiresApproval": true
    },
    {
      "id": "ubuntu-security-notices",
      "name": "Ubuntu Security Notices",
      "url": "https://ubuntu.com/security/notices",
      "type": "official",
      "monitor": "rss-or-atom",
      "priority": "high",
      "layers": [
        "os"
      ],
      "topics": [
        "security-intelligence"
      ],
      "defaultActionLevel": "observe",
      "publicationRiskFloor": "low",
      "rawPayloadPublic": false,
      "automatedFetchRequiresApproval": true
    },
    {
      "id": "wordpress-security-feed",
      "name": "WordPress Security Feed",
      "url": "https://wordpress.org/news/category/security/feed/",
      "type": "official",
      "monitor": "rss",
      "priority": "high",
      "layers": [
        "cms"
      ],
      "topics": [
        "cms-selection",
        "security-intelligence"
      ],
      "defaultActionLevel": "observe",
      "publicationRiskFloor": "medium",
      "rawPayloadPublic": false,
      "automatedFetchRequiresApproval": true
    }
  ]
}