project-kb
project-kb copied to clipboard
export to Steady: the script does not delete local clones of repositories
The temporary cloned repositories take a lot of space. Delete it as soon it is consumed by KB-Importer https://github.com/SAP/project-kb/blob/master/kaybee/internal/tasks/data/default_config.yaml
If we deleted the clone after each vulnerability is processed, as a result we would have to clone multiple times the repositories for which he have multiple vulnerabilities.
A better solution would be to export vulnerabilities grouping them by repository, so that we can work on all those that need a certain repository and then safely delete the clone.
PROBLEM: the repository may not be unique for a given vulnerability.