-
Notifications
You must be signed in to change notification settings - Fork 55
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
internal/genericosv: fetch GHSAs from github instead of osv.dev
Fetch GHSA OSV from github.com/github/advisory-database instead of osv.dev, as osv.dev sometimes makes edits to the OSV or has an older version of it. Unfortunately this requires making two HTTP requests: the first to determine the published year/month of the GHSA from api.github.com, and the second to pull the OSV from the GHSA database git repo. There is no way (that I am aware of) to make a direct API call to get GHSAs in OSV format. Change-Id: I8bfd580b1e8ee38f9bc6b8afb08415e0de1a3040 Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/597735 Reviewed-by: Damien Neil <dneil@google.com> LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
- Loading branch information
Showing
3 changed files
with
70 additions
and
22 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters