Skip to content

Add RHLW prefix for Red Hat Lightwell#571

Draft
syncrou wants to merge 1 commit into
ossf:mainfrom
syncrou:add-rhlw-prefix
Draft

Add RHLW prefix for Red Hat Lightwell#571
syncrou wants to merge 1 commit into
ossf:mainfrom
syncrou:add-rhlw-prefix

Conversation

@syncrou

@syncrou syncrou commented Jun 29, 2026

Copy link
Copy Markdown

Summary

Add the RHLW identifier prefix for Red Hat Lightwell, an automated CVE remediation pipeline for open source Java libraries.

Lightwell scans customer dependency manifests, finds and backports upstream fixes, builds patched artifacts, and publishes signed JARs. Vulnerability advisories will be published in OSV format to the lightwell-osv repository.

Changes

  • docs/schema.md — Added RHLW row to the home database prefix table (alphabetically after RHSA/RHBA/RHEA)
  • validation/schema.json — Added RHLW to the $defs.prefix.pattern regex

Example ID

RHLW-2026-0001

Signed-off-by: Drew Bomhof dbomhof@redhat.com

Red Hat Lightwell is an automated CVE remediation pipeline for open
source Java libraries. It produces patched artifacts and publishes
vulnerability advisories in the OSV format.

The RHLW prefix will be used for advisories published to
https://github.com/project-lightwell/lightwell-osv

Signed-off-by: Drew Bomhof <dbomhof@redhat.com>
@syncrou syncrou marked this pull request as draft June 29, 2026 18:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant