Request for ability to bulk update advisories with `wolfictl advisory`
bugneeds-triage
We often find ourselves needing to bulk update advisories and this proves difficult.
Take for example the scenario for golang CVEs for [golang.org/x/oauth2/jws CVE-2025-22868](http://golang.org/x/oauth2/jws) and [golang.org/x/crypto/ssh CVE-2025-22869](http://golang.org/x/crypto/ssh) where we proactively scanned binaries with govuln check and tried to bulk script creation of false positive advisory events.
One failure was that due to repeated lookups for CVE aliases using the github API
```
ERRO unable to discover aliases for newly created advisory: unexpected status code 403, body: {"message":"API rate limit exceeded for user ID 247131. If you reach out to GitHub Support for help, please include the request ID A188:3E46F:32A46D:3C8493:67C74718 and timestamp 2025-03-04 18:31:52 UTC.","documentation_url":"https://docs.github.com/rest/overview/rate-limits-for-the-rest-api","status":"403"}
```
Perhaps we can pass the alias as a flag to avoid this lookup.
Another was the reliance on needing to pass APKINDEX URL which is queried each time. I would like a way to override this check assuming I know that the package exists in the repo I am targeting.
关闭于 2025-03-07 7 条评论