Integrate Data Sources

[andrewg-xyz]

As a Buyer I want Security information about packages So that I can make an informed decision

Acceptance Criteria

Given A user is navigating a package on UDS Marketplace When Viewing detailed information about the package/application Then data provided by uds-security-hub and other data sources is integrated with the tech stack and displayed to the user, per Figma design

Instructions on pulling security hub db here

- [ ] https://github.com/defenseunicorns/uds-marketplace/issues/163
- [ ] https://github.com/defenseunicorns/uds-marketplace/issues/133
- [ ] https://github.com/defenseunicorns/uds-marketplace/issues/134
- [ ] https://github.com/defenseunicorns/uds-marketplace/issues/135
- [ ] https://github.com/defenseunicorns/uds-marketplace/issues/164
- [ ] https://github.com/defenseunicorns/uds-marketplace/issues/86
- [ ] https://github.com/defenseunicorns/uds-marketplace/issues/24

[andrewg-xyz]

Assuming GitHub role with access to s3 bucket: https://defense-unicorns.slack.com/archives/C02UAUHK3DX/p1723746601446269?thread_ts=1722872772.949129&cid=C02UAUHK3DX

[andrewg-xyz]

Pull in Security Hub Data

• raw count of category of CVE data
• Availability of SBOM and CVE reports

[andrewg-xyz]

Related Metatdata sources: https://docs.google.com/spreadsheets/d/1ByW5NUyQe9LUYwI7qaW7kBK5Z4SuiJDWcMroKeRYblc/edit?pli=1&gid=0#gid=0