I'd suggest that Ubuntu officially adopt the server-side tool and that appropriate updates are made to the defaults distributed with the package so that writing manual overrides to SUITE and SOURCE are not needed in /etc/default/debsecan to get usable results.
The unofficial database proposed in https:/ /bugs.launchpad .net/ubuntu/ +source/ debsecan/ +bug/95925/ comments/ 12 appears to work. It's at least a major improvement on the current situation.
I'd suggest that Ubuntu officially adopt the server-side tool and that appropriate updates are made to the defaults distributed with the package so that writing manual overrides to SUITE and SOURCE are not needed in /etc/default/ debsecan to get usable results.