Xueqin Cui
Xueqin Cui
There is no documentation for the experimental `update` subcommand.
We now rely on real data for testing and this causes us updating snapshots quite often. Considering the work for interfaces and clients are done, we can implement mock clients...
Currently, OSV-Scanner depends on [`requirementsnet` extractor](https://github.com/google/osv-scalibr/tree/main/extractor/filesystem/language/python/requirementsnet) for transitive extraction for `requirements.txt`. However, OSV-Scalibr is migrating to use [`transitivedependency` enricher](https://github.com/google/osv-scalibr/tree/main/enricher/transitivedependency/requirements) for this purpose. We probably should migrate [`requirementsenhancable`](https://github.com/google/osv-scanner/tree/main/internal/scalibrextract/language/python/requirementsenhancable) to use the...
We now rely on osv-schema for vulnerability.proto so we may need to regenerate protobuf code if osv-schema is updated.