Sahiba Mittal

OSV fix : removed alias check

1

Signed-off-by: Sahiba Mittal **Current behaviour:** OSV download task checks if there is any existing vulnerability with ID same as one of aliases of incoming new vulnerability (with new vulnerability ID)...

OSV : replace ecosystem hardcoding with list of ecosystems managed by Google

2

### Current Behavior: For OSV mirroring, we hard code the list of ecosystems to get vulnerabilities. ### Proposed Behavior: OSV has enabled a list of ecosystems they maintain -> https://osv-vulnerabilities.storage.googleapis.com/ecosystems.txt...

### Current Behavior Currently, when a project is cloned (via endpoint /project/clone), state on its completion is not maintained which makes it hard to determine if its cloning is finished...

Change Sonar to Codacy

2

### Description PR to test the sonar analysis being triggered by PRs raised from forks. This PR is being raised from my fork to test it. ### Checklist - [x]...

Add mode of operation in Vulnerability policy

1

### Description Add mode of operation for Vulnerability Policy. ### Addressed Issue https://github.com/DependencyTrack/hyades/issues/957 ### Checklist - [x] I have read and understand the [contributing guidelines](../CONTRIBUTING.md#pull-requests) - [ ] This PR...

Validation on repositories' URLs for integrity check

1

Currently, integrity check can be performed only on Maven central repository and artifactory (for maven, npm, pypi). For rest of existing or any new repository user creates, we need validation...

Map specific version of vulnerability as affected vulnerable software

3

Currently, vulnerabilities are missing affected package version info due to indefinite ranges. Example, for a vulnerability with version ">7.0", as per previous discussions, we decided to skip mapping such open...

Revisit inclusion of affected versions for Analysers

1

Currently in Hyades, we've skipped the mapping of affected package versions for scan analysers (Snyk, OssIndex) because of scenario like : If Snyk reports affected versions and later it doesn't,...

### Description Replace `UUID` columns type from `VARCHAR` to Postgres native `UUID`. ### Addressed Issue Closes https://github.com/DependencyTrack/hyades/issues/1417 ### Checklist - [x] I have read and understand the [contributing guidelines] -...

Trivy analyzer integration

2

### Description Migrating the Trivy support added in Dependency-Track v4.11 to Hyades. Co-authored-by: Marlon Pina Tojal ### Addressed Issue Port change https://github.com/DependencyTrack/hyades/issues/1343 ### Checklist - [x] I have read and...