tree ec3e1b0b07562e60f5dd6f89773c1bc57279e664
parent 225ca85d5ff4cf5eb09beeeb49a69b9f8267445f
author Maceo Thompson <maceothompson@google.com> 1707247201 -0500
committer Maceo Thompson <maceothompson@google.com> 1707765248 +0000

cmd/vulnreport: add -update flag to vulnreport symbols

Adds an -update flag to the vulnreport symbols command.
Previously, vulnreport would automatically add all fix links that
resulted in vulnerable symbols for a given module to that module's
FixLinks field.
Now, if the FixLinks field is populated it is considered the source of
truth, and vulnreport symbols will use only the links in that field.
If FixLinks is empty, vulnreport will derive fix links from the report's
References field and use those to find vulnerable symbols.

Change-Id: Ibab159987b60d445707083885a56ce6dc0e45302
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/562236
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>