[OCU-125] Add pURL targets for remaining SCA producers - Githubissues

ocurity / dracon

Security scanning & static analysis tool - forked and rewritten from @thought-machine/dracon

https://ocurity.com

Apache License 2.0

62 stars 10 forks source link

[OCU-125] Add pURL targets for remaining SCA producers #231

Closed flowirtz closed 3 days ago

flowirtz commented 1 week ago

This PR switches over the two last remaining SCA producers that didn't yet produce pURLs as Targets.

For both the producers/golang-nancy and producers/typescript-yarn-audit, this PR is:

switching them over to record pURLs as the Issue.Target
adding support for them to record CWEs
adding example data and documentation
adding an e2e test
adding a SCA label as the test-type in the task.yaml

Additionally, this PR removes the producers/typescript-npm-audit as discussed here.