chore: refoactor downstream to work with the new upstream version

Author: HozifaWasfy

packages/osv-offline-db/src/lib/db.int.spec.ts

@@ -245,12 +245,47 @@ export class OsvOfflineDb {
     }
   }
 
-  async query_containers(
-    repository: string
-  ): Promise<Osv.Vulnerability[]> {
-    return await this.db["Docker" as Ecosystem].findAsync({
-      'affected.package.name': repository,
-      'affected.package.ecosystem': 'Docker'
-    });
+  async query_containers(repository: string): Promise<Vulnerability[]> {
+    if (this.disposed) {
+      throw new Error('Database disposed');
+    }
+    const data = await this._load('Docker');
+
+    if (!data) {
+      return [];
+    }
+
+    const pointers = data.index.get(repository);
+
+    if (!pointers || pointers.length === 0) {
+      return [];
+    }
+
+    const advisories = await Promise.all(
+      pointers.map(async ({ offset, length }) => {
+        const buffer = Buffer.allocUnsafe(length);
+        const { bytesRead } = await readAsync(
+          data.fd,
+          buffer,
+          0,
+          length,
+          offset
+        );
+        return JSON.parse(
+          buffer.toString('utf8', 0, bytesRead)
+        ) as Vulnerability;
+      })
+    );
+
+    if (this.disposed) return [];
+
+    return advisories.filter((vuln) =>
+      vuln.affected?.some(
+        (a) =>
+          a.package?.name === repository &&
+          (a.package.ecosystem === 'Docker' ||
+            a.package.ecosystem.startsWith(`Docker:`))
+      )
+    );
   }
 }

packages/osv-offline-db/src/lib/db.ts

@@ -13,7 +13,7 @@
     "start": "tsx ./src/index.ts"
   },
   "dependencies": {
-    "@mintmaker/osv-offline-db": "0.0.0-semantic-release",
+    "@mintmaker/osv-offline-db": "workspace:*",
     "@octokit/rest": "22.0.1",
     "adm-zip": "0.5.17",
     "fs-extra": "11.3.5",

packages/osv-offline-updater/package.json

@@ -2,7 +2,7 @@ import fs from 'fs-extra';
 import { createWriteStream } from 'node:fs';
 import { randomBytes } from 'node:crypto';
 import { finished } from 'node:stream/promises';
-import { Osv, OsvOfflineDb, ecosystems } from '@mintmaker/osv-offline-db';
+import { OsvOfflineDb, ecosystems } from '@mintmaker/osv-offline-db';
 import { GitHub } from './client/github.ts';
 import signale from 'signale';
 import { OsvDownloader } from './client/osv.ts';

packages/osv-offline-updater/src/index.ts

@@ -12,7 +12,7 @@
     "url": "https://github.com/redhat-exd-rebuilds/osv-offline.git"
   },
   "dependencies": {
-    "@mintmaker/osv-offline-db": "0.0.0-semantic-release",
+    "@mintmaker/osv-offline-db": "workspace:*",
     "adm-zip": "~0.5.17",
     "debug": "^4.4.3",
     "fs-extra": "^11.3.5",

packages/osv-offline/package.json

@@ -1,2 +1,2 @@
 export { Osv, Ecosystem } from '@mintmaker/osv-offline-db';
-export { OsvOffline } from './lib/osv-offline';
+export { OsvOffline } from './lib/osv-offline.ts';

packages/osv-offline/src/index.ts

@@ -1,4 +1,4 @@
-import { OsvOfflineDb } from '@renovatebot/osv-offline-db';
+import { OsvOfflineDb } from '@mintmaker/osv-offline-db';
 import fs from 'fs-extra';
 import path from 'path';
 import { beforeEach, describe, expect, it, vi } from 'vitest';

packages/osv-offline/src/lib/download.unit.spec.ts

@@ -34,9 +34,10 @@ describe('packages/osv-offline/src/lib/osv-offline.int', () => {
 
   describe('getContainerVulnerabilities', () => {
     it('returns empty array for invalid package', async () => {
-      const result = await osvOffline.getContainerVulnerabilities("quay.io/some/repo");
+      const result =
+        await osvOffline.getContainerVulnerabilities('quay.io/some/repo');
 
-      expect(result).toBeEmptyArray();
+      expect(result).toEqual([]);
     });
   });
 });