This issue is to help figure out what changes are needed to the osv transformer in Grype. There are a number of proposed changes that are needed to support various data sources. I'm trying to get all of them linked to this issue so that we can figure out how to proceed with getting them in (without contributors rebasing on one another's OSV transformer fixes half a dozen times.)
Here are some PRs that are proposing to change the Grype OSV transformer:
And some Vunnel PRs that will end up wanting to change the OSV transformer:
My goal in this issue is to get all of this work merged or unblocked. If you're the author of one of these PRs, please be patient with me while I figure out a path forward for our suddenly very crowded OSV transformer; I've let a little bit of a traffic jam develop and need to figure it out, and I thought I'd figure it out on this issue so you all aren't guessing why I haven't merged your PR.
This issue is to help figure out what changes are needed to the osv transformer in Grype. There are a number of proposed changes that are needed to support various data sources. I'm trying to get all of them linked to this issue so that we can figure out how to proceed with getting them in (without contributors rebasing on one another's OSV transformer fixes half a dozen times.)
Here are some PRs that are proposing to change the Grype OSV transformer:
And some Vunnel PRs that will end up wanting to change the OSV transformer:
My goal in this issue is to get all of this work merged or unblocked. If you're the author of one of these PRs, please be patient with me while I figure out a path forward for our suddenly very crowded OSV transformer; I've let a little bit of a traffic jam develop and need to figure it out, and I thought I'd figure it out on this issue so you all aren't guessing why I haven't merged your PR.