We are, and we're talking to them. In an ideal world we would have loved to have merged the databases. I expect the two databases will move in sync. The GitHub

We are, and we're talking to them. In an ideal world we would have loved to have merged the databases. I expect the two databases will move in sync. The GitHub advisory database is licensed as CC BY 4.0 (i.e., attribution only), so we actively encourage others, including the Go Vulnerability Database, to pull from it.