osv-detector
osv-detector copied to clipboard
feat: introduce a smarter database for osv.dev zips
This introduces a new "smart" database for zips provided by osv.dev that uses the modified_id.csv file stored in the ecosystems bucket to selectively update advisories, effectively combining the zip and directory based databases.
If the database isn't available, then it will be initialized using the all.zip for the particular ecosystem, otherwise we will just download the advisories that have changed since the database was last modified.
This should be at most as slow as the zip database, but hopefully most of the time be faster