Imported Anchore NVD overrides

vulnerabilities/importers/__init__.py

@@ -9,6 +9,7 @@
 
 from vulnerabilities.pipelines import VulnerableCodeBaseImporterPipelineV2
 from vulnerabilities.pipelines.v2_importers import alpine_linux_importer as alpine_linux_importer_v2
+from vulnerabilities.pipelines.v2_importers import anchore_importer as anchore_importer_v2
 from vulnerabilities.pipelines.v2_importers import aosp_importer as aosp_importer_v2
 from vulnerabilities.pipelines.v2_importers import apache_httpd_importer as apache_httpd_v2
 from vulnerabilities.pipelines.v2_importers import apache_kafka_importer as apache_kafka_importer_v2
@@ -67,6 +68,7 @@
         pysec_importer_v2.PyPIImporterPipeline,
         xen_importer_v2.XenImporterPipeline,
         curl_importer_v2.CurlImporterPipeline,
+        anchore_importer_v2.AnchoreImporterPipeline,
         oss_fuzz_v2.OSSFuzzImporterPipeline,
         istio_importer_v2.IstioImporterPipeline,
         postgresql_importer_v2.PostgreSQLImporterPipeline,

vulnerabilities/pipelines/v2_importers/anchore_importer.py

@@ -0,0 +1,23 @@
+#
+# Copyright (c) nexB Inc. and others. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+#
+
+import logging
+from typing import Iterable
+
+from vulnerabilities.importer import AdvisoryDataV2
+from vulnerabilities.pipelines import VulnerableCodeBaseImporterPipelineV2
+
+logger = logging.getLogger(__name__)
+
+
+class AnchoreImporterPipeline(VulnerableCodeBaseImporterPipelineV2):
+    """
+    Importer for https://github.com/anchore/nvd-data-overrides
+    """
+
+    pipeline_id = "anchore_importer_v2"
+    datasource_id = "anchore"
+    spdx_license_expression = "Apache-2.0"
+    license_url = "https://github.com/anchore/nvd-data-overrides/blob/main/LICENSE"