google / osv-scanner

Vulnerability scanner written in Go which uses the data provided by https://osv.dev
https://google.github.io/osv-scanner/
Apache License 2.0
6.01k stars 337 forks source link

move `Source` from `osv.Query` #1053

Open cuixq opened 1 week ago

cuixq commented 1 week ago

Currently, Query has fields required for constructing a query to OSV.dev but also has the not-that-relevant field Source. Source is in Query because we want to pass the information to the results. We should move it from Query to a separate struct - this will be a breaking change so reserve it for V2.