dependency-track
dependency-track copied to clipboard
OSV fix : removed alias check
Signed-off-by: Sahiba Mittal [email protected]
Current behaviour: OSV download task checks if there is any existing vulnerability with ID same as one of aliases of incoming new vulnerability (with new vulnerability ID) and if alias exists we dont add this incoming vuln in DT but only add new affected packages in existing vulnerability. Proposed change: Even if alias exists in DT, we add this new incoming vuln (with new ID) as aliases will be handled separately now. (https://github.com/DependencyTrack/dependency-track/pull/1912)
@nscuro @VinodAnandan
:warning: 14 God Classes were detected by Lift in this project. Visit the Lift web console for more details.