Unify command line flags used by `scan` and `fix`

google / osv-scanner

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

https://google.github.io/osv-scanner/

Apache License 2.0

6.27k stars 363 forks source link

Open cuixq opened 6 days ago

cuixq commented 6 days ago

There are discrepancies between flags used by scan and fix

For pom.xml, scan has -lockfile but fix uses -manifest
To specify data sources, scan has experimental-resolution-data-source and fix has data-source
etc

We should unify the flags used by the two sub commands to keep consistency.