bom-squad/vulndb

OSV ingest should use snapshots via http rather than gcloud APIs

Closed this issue · 1 comments

Ingesting snapshots in the container context will require fewer moving parts to authenticate to gcloud if we just use the HTTP interface to the storage bucket directly. Ecosystem snaps can be retrieved directly from:

https://osv-vulnerabilities.storage.googleapis.com/<ecosystem>/all.zip

Implemented in dd20131