Static reachability offline support
Problem description
Currently Static Reachability requires an internet connection because the SCA-to-sarif-matcher download the pypi-metadata.
Proposal and Implementation plan
-
Integrate SCA-to-sarif-matcher in the DS analyzer code. -
Add pypi-metadata
as part of the DS analyzer image -
Add a release job that can run on a scheduled pipeline once per week to rebuild the image and update the latest release. We want to do that in order have the most up-to-datepypi-metadata
. -
Update template -
Update DS component -
Update SCA-to-sarif-matcher documentation that is moved in DS -
Update public facing docs
Edited by Nick Ilieskou