With the hasSBOM nodes being attached to artifacts as well as packages, we have to also search hasSBOM nodes via artifacts as well as packages to find vuln nodes.
This PR includes the functionality to search for vuln nodes via artifacts in addition to our already implemented functionality to search via packages.
Feature change:
With this PR, the user has to include the input type (purl, uri, artifact) when searching for vulns. This is because the user can now pass in an artifact, a purl, or a uri into the query. But, trying to understand the input is very complicated process, so leaving it as the user input is probably the best solution for now instead of us trying to guess the inputs type.
I will create a PR for guac-docs regarding this so that the demos use commands that have the types passed in.
Description of the PR
With the hasSBOM nodes being attached to artifacts as well as packages, we have to also search hasSBOM nodes via artifacts as well as packages to find vuln nodes.
This PR includes the functionality to search for vuln nodes via artifacts in addition to our already implemented functionality to search via packages.
Feature change:
PR Checklist
-s
flag togit commit
.make generate
has been runmake generate
has been runmake generate
has been runcollectsub
protobuf has been changed,make proto
has been run