google / osv.dev

Open source vulnerability DB and triage service.
https://osv.dev
Apache License 2.0
1.49k stars 186 forks source link

Sort zip in exporter #2311

Closed another-rex closed 3 months ago

another-rex commented 3 months ago

Might fix https://github.com/google/osv-scanner/pull/1007#issuecomment-2164464087

Sort the entries before adding to the zip archive.

andrewpollock commented 3 months ago

This is a good find and a good call to address and may improve unnecessary churn and maybe eventual cache-ability.