google / google/osv.dev

Delete outdated sub-ecosystem data in`osv-vulnerabilities` bucket

Open
#2,969 2 comments 0 reactions 1 assignee Claimed by @another-rex View on GitHub
backlog cleanup priority
Dominant language
Go
Stars
2.9k
Forks
369
Avg merge
1d 17h
Merged PRs (30d)
149

Description

The `osv-vulnerabilities` bucket currently stores all vulnerabilities exported by the exporter, including historical entries (no auto deletion). We recently modified the exporter to only export vulnerabilities for the main ecosystem (e.g. Debian, Ubuntu) instead of individual sub-ecosystems (e.g. Debian:11, Debian:12). Because of this change, a large number of legacy sub-ecosystem directories remain there.

To maintain a cleaner bucket, we should remove these outdated directories and files.

If we also want to remove nonexistent vulnerability records from each ecosystem, this could resolve issues like https://github.com/google/osv.dev/issues/2902

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.