aquasecurity / trivy-db

Apache License 2.0
215 stars 131 forks source link

bug(ghsa): add support of `last_known_affected_version_range` #391

Closed DmitriyLewen closed 5 months ago

DmitriyLewen commented 6 months ago

Description

ghsa uses last_known_affected_version_range (e.g. https://github.com/github/advisory-database/blob/88a23ee5cad40396bcd47a136bd21753b96e86da/advisories/github-reviewed/2023/04/GHSA-32qq-m9fh-f74w/GHSA-32qq-m9fh-f74w.json#L34). We need to add support for this field.

UPD: Use cases of last_known_affected_version_range field -https://github.com/github/advisory-database/issues/470#issuecomment-1998604377