From ddefe2ed530da20c969da0d4dd01013a67050993 Mon Sep 17 00:00:00 2001
From: Marina Villarreal <marinavillarreal@student.hartnell.edu>
Date: Wed, 22 Jul 2026 14:14:46 -0700
Subject: [PATCH] Add Anchore V2 importer stub and register pipeline

Signed-off-by: Marina Villarreal <marinavillarreal@student.hartnell.edu>
---
 vulnerabilities/importers/__init__.py         |  2 ++
 .../v2_importers/anchore_importer.py          | 23 +++++++++++++++++++
 2 files changed, 25 insertions(+)
 create mode 100644 vulnerabilities/pipelines/v2_importers/anchore_importer.py

diff --git a/vulnerabilities/importers/__init__.py b/vulnerabilities/importers/__init__.py
index a33e6d714..7df9e1351 100644
--- a/vulnerabilities/importers/__init__.py
+++ b/vulnerabilities/importers/__init__.py
@@ -9,6 +9,7 @@
 
 from vulnerabilities.pipelines import VulnerableCodeBaseImporterPipelineV2
 from vulnerabilities.pipelines.v2_importers import alpine_linux_importer as alpine_linux_importer_v2
+from vulnerabilities.pipelines.v2_importers import anchore_importer as anchore_importer_v2
 from vulnerabilities.pipelines.v2_importers import aosp_importer as aosp_importer_v2
 from vulnerabilities.pipelines.v2_importers import apache_httpd_importer as apache_httpd_v2
 from vulnerabilities.pipelines.v2_importers import apache_kafka_importer as apache_kafka_importer_v2
@@ -67,6 +68,7 @@
         pysec_importer_v2.PyPIImporterPipeline,
         xen_importer_v2.XenImporterPipeline,
         curl_importer_v2.CurlImporterPipeline,
+        anchore_importer_v2.AnchoreImporterPipeline,
         oss_fuzz_v2.OSSFuzzImporterPipeline,
         istio_importer_v2.IstioImporterPipeline,
         postgresql_importer_v2.PostgreSQLImporterPipeline,
diff --git a/vulnerabilities/pipelines/v2_importers/anchore_importer.py b/vulnerabilities/pipelines/v2_importers/anchore_importer.py
new file mode 100644
index 000000000..eb6831ff6
--- /dev/null
+++ b/vulnerabilities/pipelines/v2_importers/anchore_importer.py
@@ -0,0 +1,23 @@
+#
+# Copyright (c) nexB Inc. and others. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+#
+
+import logging
+from typing import Iterable
+
+from vulnerabilities.importer import AdvisoryDataV2
+from vulnerabilities.pipelines import VulnerableCodeBaseImporterPipelineV2
+
+logger = logging.getLogger(__name__)
+
+
+class AnchoreImporterPipeline(VulnerableCodeBaseImporterPipelineV2):
+    """
+    Importer for https://github.com/anchore/nvd-data-overrides
+    """
+
+    pipeline_id = "anchore_importer_v2"
+    datasource_id = "anchore"
+    spdx_license_expression = "Apache-2.0"
+    license_url = "https://github.com/anchore/nvd-data-overrides/blob/main/LICENSE"