tree f3ada4b451b06a1f453abdc9653da728d3778b2f
parent aef190e609c9d0c0f38a6396486e3f75ecf8303c
author Jonathan Amsterdam <jba@google.com> 1641502876 -0500
committer Jonathan Amsterdam <jba@google.com> 1641591243 +0000

internal/worker: update false positives only if newer

Instead of inserting false positives only once when the DB
is new, update them on each run.

That way, we can add to our list of false positives and have
those changes reflected in the DB.

To do that safely, we have to make sure we don't update a false
positive record that has changed since the program's internal data was
created. We use the commit times for that.

Change-Id: I39d21940af2a302f7860a7e8563a91c88621b12a
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/376298
Trust: Jonathan Amsterdam <jba@google.com>
Run-TryBot: Jonathan Amsterdam <jba@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Julie Qiu <julie@golang.org>