NewEcho creates a bucket for Echo

NewErlang creates a bucket for Erlang ecosystem with data source

NewJulia creates a bucket for Julia ecosystem with data source

NewKubernetes creates a bucket for Kubernetes ecosystem with data source

NewMariner creates a bucket for CBL-Mariner

NewMinimOS creates a bucket for MinimOS

NewNuGet creates a bucket for NuGet ecosystem with data source

NewOpenSUSELeapMicro creates a bucket for openSUSE Leap Micro

NewPub creates a bucket for Pub ecosystem with data source

NewSwift creates a bucket for Swift ecosystem with data source

NewWolfi creates a bucket for Wolfi

PackageFlavor determinants the package "flavor" based on its version string - normal - FIPS validated - ksplice userspace

PostParseAffected is called after parseAffected to transform Advisory with Affected

Put writes an advisory to the database.

PutMappings writes CPE-related mappings to the database and returns the CPE list to use for advisory writes.

ReleaseDate returns the vendor_fix remediation timestamp for the given RHSA ID, or the zero value when no timestamp was recorded for it.

SaveAdvisoryDetails Extract advisories from 'advisory-detail' bucket and copy them in each

SeverityFromPriority converts Ubuntu priority into Trivy severity

TransformAdvisories transforms the advisories

WithBucketResolver sets a custom resolver for a specific ecosystem

addRawEntry stores raw, per-package entries from the CSAF VEX data without further aggregation or processing.

aggregateArches merges entries that only differ in their architecture

aggregateCPEs merges entries that only differ in their CPEs

aggregateCVEs merges entries that only differ in their CVE IDs (Alias)

buildProductMap pre-builds all product lookups by iterating over all relationships and branches in the ProductTree, resolving each ProductID to a Prod

canonicalizeReferenceURL returns a canonical form of an absolute reference URL so that semantically equivalent links from different upstream sources d

determinePrimaryFixedVersion determines primary fixed version for backward compatibility It is chosen as the highest normal flavor version on x86_64 i

encodeArches encodes a slice of architectures as a string for consistent grouping

getCvssV2 selects vector, score and severity from V2 metrics

getCvssV3 selects vector, score and severity from V3* metrics

getCvssV40 selects vector, score and severity from V40 metrics