VCIO-next: Add Almalinux advisories

[ambuj-1211]

Fix #1201
@ziadhany @TG1999 @keshav-space This is the basic nit to adds Alma Linux advisories into vulnerablecode database, please review it to make further changes.

[ambuj-1211]

@ziadhany as this importer uses osv.py importer so shall I add AlmaLinux:8 and AlmaLinux:9 in supported ecosystems in osv.py

[ziadhany]

@ambuj-1211 yes, you should add it to this PURL_TYPE_BY_OSV_ECOSYSTEM dict.

[ziadhany]

@ambuj-1211
I looked into your code. Instead of using uppercase, you should use lowercase. then you are going to pass the test.

PURL_TYPE_BY_OSV_ECOSYSTEM = {
     ....
    "almalinux:8": "almalinux:8",
    "almalinux:9": "almalinux:9",
}

but you will face another issue. you need to add support for almalinux in univers.

https://github.com/nexB/univers/blob/205d7c48835dfeb6b694c9196728d2b4fa0a011a/src/univers/version_range.py#L1254:L1258

[TG1999]

@ziadhany can this be merged ?

[ziadhany]

@ziadhany can this be merged ?

I still need to review this code

[ziadhany]

@ambuj-1211

Why not use the existing OSV script directly or modify it to support Almalinux, instead of rewriting the entire code?

[ziadhany]

@ambuj-1211 Update the OSV get_affected_purl function to add support for AlmaLinux, just like we did for Maven.

vulnerablecode/vulnerabilities/importers/osv.py

Line 190 in 2888d29

def get_affected_purl(affected_pkg, raw_id):

[ambuj-1211]

@ziadhany please have a look at it I have made the necessary changes
Please have a look on get_advisory URL part am I doing it correctly?

[ziadhany]

Thanks! @ambuj-1211, the code looks good overall, just a few small nits. Please run the importer and share the logs.

[ambuj-1211]

almalinux_logs.txt
@ziadhany These are the importer logs.