Rex P

A start on the osv scanning tooling. This includes: - Fix for purl matching for debian packages - Debian docker image scanner in Go - Original python docker image scanner...

Currently on every page, the title is OSV. This makes it hard to navigate when multiple tabs of osv.dev is open, and also hard to search through history to find...

Fix API documentation

7

The current API documentation indicates that when specifying packages, the purl field is optional, but the ecosystem and package name is required. This is incorrect, the actual (and intended) implementation...

#490 Introduced support for caching calls to Debian APIs when enumerating versions. This should be extended to be applied to other ecosystems as well.

Upgrade python to the latest version (3.10 or 3.11)

Reduce dependabot running frequency so that it runs once a months instead of weekly.

https://github.com/google/osv.dev/issues/545

Add alpine as a ecosystem entry in the osv schema

Generating VEX statements

3

Automatically generate VEX statements based on call graph analysis or ignored vulnerabilities set in the scanner config.

Wrap source column when it exceeds 40 characters. An improvement to this is to calculate the max width of the table and only wrap to that.