Keep onguard (#460)

* build: trigger new build

Signed-off-by: Ruben Romero Montes <[email protected]>

* feat: add tpa client authentication (#409)

* feat: add tpa client authentication

Signed-off-by: Ruben Romero Montes <[email protected]>

* feat: allow disable tpa auth

Signed-off-by: Ruben Romero Montes <[email protected]>

* chore: update deployment files

Signed-off-by: Ruben Romero Montes <[email protected]>

---------

Signed-off-by: Ruben Romero Montes <[email protected]>

* fix: timeout cannot be parsed (#410)

Signed-off-by: Ruben Romero Montes <[email protected]>

* fix: sync generated sources (#419)

Signed-off-by: Ruben Romero Montes <[email protected]>

* feat: support cyclonedx 1.6 (#424)

Signed-off-by: Ruben Romero Montes <[email protected]>

* feat: split tpa requests (#429)

Signed-off-by: Ruben Romero Montes <[email protected]>

* feat: allow users to opt-out from trusted content (#433)

Signed-off-by: Ruben Romero Montes <[email protected]>

* feat: implement model card request and query (#435)

* feat: implement model card request and query

Signed-off-by: Ruben Romero Montes <[email protected]>

* feat: added examples and updated db to use flyway

Signed-off-by: Ruben Romero Montes <[email protected]>

* feat: use h2 for tests

Signed-off-by: Ruben Romero Montes <[email protected]>

* docs: update documentation and refactor examples folders

Signed-off-by: Ruben Romero Montes <[email protected]>

* feat: add tests

Signed-off-by: Ruben Romero Montes <[email protected]>

* fix: missing generated js source

Signed-off-by: Ruben Romero Montes <[email protected]>

---------

Signed-off-by: Ruben Romero Montes <[email protected]>

* feat: adapt tpa response (#447)

Signed-off-by: Ruben Romero Montes <[email protected]>

* feat: restore osv integration

Signed-off-by: Ruben Romero Montes <[email protected]>

---------

Signed-off-by: Ruben Romero Montes <[email protected]>

Author: ruromero

.gitignore

@@ -23,4 +23,4 @@ hs_err_pid*
 .env
 .flattened-pom.xml
 .quarkus
-.local-deploy
+.local-deploy

deploy/openshift/template.yaml

@@ -101,9 +101,7 @@ objects:
                     secretKeyRef:
                       name: exhort-secret
                       key: tpa.client.secret
-                - name: API_SNYK_DISABLED
-                  value: "true"
-                - name: API_OSSINDEX_DISABLED
+                - name: API_TPA_DISABLED
                   value: "true"
                 - name: TELEMETRY_WRITE_KEY
                   valueFrom:

src/main/java/com/redhat/exhort/config/metrics/CustomMetrics.java

@@ -43,6 +43,7 @@ public class CustomMetrics {
           "snykRequest",
           "getTrustedContent",
           "tpaRequest",
+          "osvRequest",
           "ossValidateCredentials",
           "ossSplitReq",
           "ossIndexRequest",

src/main/java/com/redhat/exhort/integration/Constants.java

@@ -64,6 +64,7 @@ private Constants() {}
   public static final String SNYK_PROVIDER = "snyk";
   public static final String OSS_INDEX_PROVIDER = "oss-index";
   public static final String TRUSTED_CONTENT_PROVIDER = "trusted-content";
+  public static final String OSV_PROVIDER = "osv";
   public static final String TPA_PROVIDER = "tpa";
   public static final String UNKNOWN_PROVIDER = "unknown";
 
@@ -100,6 +101,9 @@ private Constants() {}
   public static final String OSS_INDEX_AUTH_COMPONENT_API_PATH = "/authorized/component-report";
   public static final String OSS_INDEX_VERSION_PATH = "/version";
 
+  public static final String OSV_NVD_PURLS_PATH = "/purls";
+  public static final String OSV_NVD_HEALTH_PATH = "/q/health";
+
   public static final String TRUSTED_CONTENT_PATH = "/recommend";
   public static final String TPA_ANALYZE_PATH = "/vulnerability/analyze";
   public static final String TPA_HEALTH_PATH = "/health/live";
@@ -120,6 +124,7 @@ private Constants() {}
             {
               add(SNYK_PROVIDER);
               add(OSS_INDEX_PROVIDER);
+              add(OSV_PROVIDER);
               add(TPA_PROVIDER);
             }
           });