Retire remaining active NVD sources

08-threat-intel/generated/retired-sources.json

@@ -1,4 +1,16 @@
 [
+  {
+    "system_id": "adminer",
+    "display_name": "Adminer",
+    "source_name": "NVD Adminer",
+    "bucket": "official_sources",
+    "kind": "nvd-search",
+    "retired_reason": "OSV Adminer provides a machine-readable Packagist-aligned source, removing the need for NVD public search.",
+    "replacement_sources": [
+      "OSV Adminer"
+    ],
+    "url": ""
+  },
   {
     "system_id": "adobe-commerce",
     "display_name": "Adobe Commerce",
@@ -26,6 +38,18 @@
     ],
     "url": ""
   },
+  {
+    "system_id": "adobe-commerce",
+    "display_name": "Adobe Commerce",
+    "source_name": "NVD Adobe Commerce",
+    "bucket": "official_sources",
+    "kind": "nvd-search",
+    "retired_reason": "Adobe Magento Security Index is now the active official machine-readable source, so NVD public search is no longer needed for daily collection.",
+    "replacement_sources": [
+      "Adobe Magento Security Index"
+    ],
+    "url": ""
+  },
   {
     "system_id": "adobe-commerce",
     "display_name": "Adobe Commerce",
@@ -51,6 +75,44 @@
     ],
     "url": ""
   },
+  {
+    "system_id": "apache-httpd",
+    "display_name": "Apache HTTP Server",
+    "source_name": "NVD Apache HTTP Server",
+    "bucket": "official_sources",
+    "kind": "nvd-search",
+    "retired_reason": "Official Apache HTTPD advisories page plus CISA KEV are sufficient active sources for daily monitoring.",
+    "replacement_sources": [
+      "Apache HTTPD Security",
+      "CISA KEV Apache HTTPD"
+    ],
+    "url": ""
+  },
+  {
+    "system_id": "apache-tomcat",
+    "display_name": "Apache Tomcat",
+    "source_name": "NVD Tomcat",
+    "bucket": "official_sources",
+    "kind": "nvd-search",
+    "retired_reason": "Official Tomcat advisories page plus CISA KEV are sufficient active sources for daily monitoring.",
+    "replacement_sources": [
+      "Apache Tomcat Security",
+      "CISA KEV Tomcat"
+    ],
+    "url": ""
+  },
+  {
+    "system_id": "aspnet-core",
+    "display_name": "ASP.NET Core",
+    "source_name": "NVD ASP.NET Core",
+    "bucket": "official_sources",
+    "kind": "nvd-search",
+    "retired_reason": "OSV ASP.NET Core provides machine-readable NuGet-aligned coverage with lower latency than NVD public search.",
+    "replacement_sources": [
+      "OSV ASP.NET Core"
+    ],
+    "url": ""
+  },
   {
     "system_id": "astro",
     "display_name": "Astro",
@@ -200,6 +262,19 @@
     ],
     "url": ""
   },
+  {
+    "system_id": "gitlab-ce",
+    "display_name": "GitLab CE",
+    "source_name": "NVD GitLab",
+    "bucket": "official_sources",
+    "kind": "nvd-search",
+    "retired_reason": "GitLab Security Releases Atom provides an official machine-readable feed, so NVD public search is no longer required.",
+    "replacement_sources": [
+      "GitLab Security Releases",
+      "GitLab Security Releases Atom"
+    ],
+    "url": ""
+  },
   {
     "system_id": "hapi",
     "display_name": "Hapi",
@@ -224,6 +299,31 @@
     ],
     "url": "https://www.haproxy.org/security/"
   },
+  {
+    "system_id": "haproxy",
+    "display_name": "HAProxy",
+    "source_name": "NVD HAProxy",
+    "bucket": "official_sources",
+    "kind": "nvd-search",
+    "retired_reason": "HAProxy Blog Feed is an active official RSS source, so NVD public search is no longer required.",
+    "replacement_sources": [
+      "HAProxy Blog Feed"
+    ],
+    "url": ""
+  },
+  {
+    "system_id": "jenkins",
+    "display_name": "Jenkins",
+    "source_name": "NVD Jenkins",
+    "bucket": "official_sources",
+    "kind": "nvd-search",
+    "retired_reason": "Jenkins Security Advisories RSS provides an official machine-readable feed, replacing NVD public search.",
+    "replacement_sources": [
+      "Jenkins Security Advisories",
+      "Jenkins Security Advisories RSS"
+    ],
+    "url": ""
+  },
   {
     "system_id": "joomla",
     "display_name": "Joomla",
@@ -237,6 +337,19 @@
     ],
     "url": ""
   },
+  {
+    "system_id": "kibana",
+    "display_name": "Kibana",
+    "source_name": "NVD Kibana",
+    "bucket": "official_sources",
+    "kind": "nvd-search",
+    "retired_reason": "Elastic Security Announcements RSS provides an official machine-readable feed, replacing NVD public search.",
+    "replacement_sources": [
+      "Elastic Security Announcements",
+      "Elastic Security Announcements RSS"
+    ],
+    "url": ""
+  },
   {
     "system_id": "koa",
     "display_name": "Koa",
@@ -261,6 +374,19 @@
     ],
     "url": ""
   },
+  {
+    "system_id": "magento-open-source",
+    "display_name": "Magento Open Source",
+    "source_name": "NVD Magento",
+    "bucket": "official_sources",
+    "kind": "nvd-search",
+    "retired_reason": "OSV Magento Open Source plus Magento GitHub advisories replace NVD public search for machine-readable collection.",
+    "replacement_sources": [
+      "Magento GitHub Advisories",
+      "OSV Magento Open Source"
+    ],
+    "url": ""
+  },
   {
     "system_id": "mattermost",
     "display_name": "Mattermost",
@@ -373,6 +499,19 @@
     ],
     "url": ""
   },
+  {
+    "system_id": "nginx",
+    "display_name": "Nginx",
+    "source_name": "NVD NGINX",
+    "bucket": "official_sources",
+    "kind": "nvd-search",
+    "retired_reason": "Official NGINX advisories page and CISA KEV together provide the needed daily signal without NVD public-search latency.",
+    "replacement_sources": [
+      "NGINX Security Advisories",
+      "CISA KEV NGINX"
+    ],
+    "url": ""
+  },
   {
     "system_id": "nuxt",
     "display_name": "Nuxt",