Expand intel coverage and refresh monitoring

08-threat-intel/generated/retired-sources.json

@@ -84,7 +84,8 @@
     "kind": "ghsa-global",
     "retired_reason": "Unauthenticated GHSA API requests are rate-limited in daily monitoring; Discourse release feed remains the active official source.",
     "replacement_sources": [
-      "Discourse Release Notes RSS"
+      "Discourse Release Notes RSS",
+      "Discourse Security RSS"
     ],
     "url": ""
   },
@@ -243,6 +244,7 @@
     "kind": "html-links",
     "retired_reason": "MediaWiki security page is no longer reachable reliably from the collector path; NVD replacement remains active.",
     "replacement_sources": [
+      "MediaWiki Announce RSS",
       "NVD MediaWiki"
     ],
     "url": "https://www.mediawiki.org/wiki/Security"
@@ -253,7 +255,7 @@
     "source_name": "Moodle Security News",
     "bucket": "official_sources",
     "kind": "html-links",
-    "retired_reason": "Moodle security page returned repeated 403 responses from the collector path; NVD replacement remains active.",
+    "retired_reason": "Security page is reachable with a browser-style UA, but the current markup only exposes generic \"Discuss this topic\" anchors to the collector; NVD Moodle remains the active replacement source until a richer parser is added.",
     "replacement_sources": [
       "NVD Moodle"
     ],
@@ -328,9 +330,10 @@
     "source_name": "GitHub Global Advisories",
     "bucket": "official_sources",
     "kind": "ghsa-global",
-    "retired_reason": "Unauthenticated GitHub advisory API is quota-limited; Spring official security page remains the active source.",
+    "retired_reason": "Unauthenticated GitHub advisory API is quota-limited; Spring official page and OSV remain the active replacements.",
     "replacement_sources": [
-      "Spring Security Advisories"
+      "Spring Security Advisories",
+      "OSV Spring Boot"
     ],
     "url": ""
   },
@@ -340,9 +343,10 @@
     "source_name": "GitHub Global Advisories",
     "bucket": "official_sources",
     "kind": "ghsa-global",
-    "retired_reason": "Unauthenticated GHSA API requests are rate-limited in daily monitoring; Spring Security Advisories remains the active replacement source.",
+    "retired_reason": "Unauthenticated GHSA API requests are rate-limited in daily monitoring; Spring official page and OSV remain the active replacements.",
     "replacement_sources": [
-      "Spring Security Advisories"
+      "Spring Security Advisories",
+      "OSV Spring Framework"
     ],
     "url": ""
   },
@@ -352,9 +356,10 @@
     "source_name": "GitHub Global Advisories",
     "bucket": "official_sources",
     "kind": "ghsa-global",
-    "retired_reason": "Unauthenticated GitHub advisory API is quota-limited; Spring official security page remains the active source.",
+    "retired_reason": "Unauthenticated GitHub advisory API is quota-limited; Spring official page and OSV remain the active replacements.",
     "replacement_sources": [
-      "Spring Security Advisories"
+      "Spring Security Advisories",
+      "OSV Spring Security"
     ],
     "url": ""
   },