Open-Vulnerability-Project icon indicating copy to clipboard operation
Open-Vulnerability-Project copied to clipboard

Published 20 hours ago • verified publisher icon jeremylong

Add support for OSV

Open nscuro opened this issue 2 years ago • 4 comments
trafficstars

Thanks for this amazing project, we make heavy use of the clients library in Hyades!

Beside the NVD and GitHub Advisories, we also mirror the OSV database. We currently do this by recurringly downloading ZIPs from OSV's GCS bucket, e.g. https://osv-vulnerabilities.storage.googleapis.com/Maven/all.zip. The official REST API does not offer any mirroring capabilities yet.

We'd love to offload the downloading and deserialization logic for OSV to the OVP client as well. Is OSV support something you'd consider implementing?

nscuro avatar Aug 17 '23 12:08 nscuro

Yes - OSV can be added to the library. However, I have some work to complete on dependency-check before I can do much more with this project.

jeremylong avatar Aug 18 '23 11:08 jeremylong