Quite a few missing aliases were found via the osv.dev API. In many
cases, these are derived from GHSAs which have a "repo-level" advisory
but not a "global-level" advisory, and are therefore not accessible
via the Github GraphQL API.
The osv.dev database in some cases considers two IDs to be
aliases which we would consider only "related". A best-effort
attempt was made to distinguish between false-positives (which were
placed in the "related" section), and true positives.
Change-Id: Ic418d8f6cf40658098e56eafafcc44434dae0ebd
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/581715
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
Auto-Submit: Tatiana Bradley <tatianabradley@google.com>
Reviewed-by: Damien Neil <dneil@google.com>
Tatiana Bradley
Damien Neil