Advisories: Ingest the NVD data source
Extend the command line application created to ingest the vuln-list repository advisory information to ingest the CVE's from the nvd folder.
There is overlap between the CVEs being imported from vuln-list and GLAD which will be imported by DS. For this first iteration the CVEs should be stored separately for each to avoid conflict. The suggestion is to create a separate table for the vuln-list CVEs and also export them separately from the DS ones.
Once the initial ingestion of data is performed, only the changes need to be processed.
The Trivy code for ingesting this data source:
Edited by Michael Eddington