Skip to content

fix(sca): report aliased advisories for one package version once - #1121

Merged
duriantaco merged 1 commit into
mainfrom
fix/sca-alias-dedupe
Oct 29, 2026
Merged

fix(sca): report aliased advisories for one package version once#1121
duriantaco merged 1 commit into
mainfrom
fix/sca-alias-dedupe

Conversation

@duriantaco

@duriantaco duriantaco commented Oct 29, 2026

Copy link
Copy Markdown
Owner

Summary

  • OSV lists one advisory under several IDs, so certifi showed up twice, once as UNKNOWN
  • Merge findings for the same package version when their IDs or aliases overlap.
  • Different versions and unrelated advisories stay separate

Tests

  • pytest test/test_sca_advisories.py

@duriantaco
duriantaco merged commit bceab8c into main Oct 29, 2026
21 checks passed
@duriantaco
duriantaco deleted the fix/sca-alias-dedupe branch October 29, 2026 07:14
@duriantaco duriantaco mentioned this pull request Oct 29, 2026
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@duriantaco