Sahiba Mittal

Hey @stevespringett - This is good, I tested it as well. But, its missing code to add aliases in OSVdownloadTask, like below code snippet needs to be added in method...

> It's a bit confusing that GSD and Snyk are mentioned in a few places, although those sources aren't yet supported and we don't have an entry in the `Vulnerability.Source`...

@stevespringett - For endpoint to getAllVulnerabilities for a project ("/project/{uuid}"), we're missing this explicit setting of aliases to vulnerability object in **VulnerabilityQueryManager**. Need to do same in method '**getVulnerabilities**' being...

@nscuro @VinodAnandan

@VinodAnandan @nscuro

@stevespringett I've been working on Snyk vulnerability analysis integration upon bom upload in DT. It will act as an analyser similar to OSS index. It'll call Snyk API for every...

No sadly for now, this is an initial version supporting two packages (maven, npm). It now enables querying the API with purl as url encoded. Currently, there are only two...

**Current bug as per testing in Postgres** The index defined on component's purl (COMPONENT_PURL_IDX) is not used in any query using purl match (either equals or LIKE). Screenshots proving the...