Jesse Seales 4fa8327ffe Osv-scanner integration (flutter/engine#49470) ...

This change integrates directly with osv-scanner rather than using the OSV API to query each dependency for vulnerabilities.

- use [lockfile format](https://github.com/flutter/engine/pull/49203) for third party deps rather than a flat file
- let osv-scanner do the work of checking for vulns rather than API calls to OSV database
- let osv-scanner create and populate the SARIF results 

A successful run of the vulnerability scanner can be seen in the tests of this PR.

*If you had to change anything in the [flutter/tests] repo, include a link to the migration guide as per the [breaking change policy].*

[C++, Objective-C, Java style guides]: https://github.com/flutter/engine/blob/main/CONTRIBUTING.md#style

2024-01-11 18:59:47 +00:00

engine/src/flutter

Osv-scanner integration (flutter/engine#49470)

2024-01-11 18:59:47 +00:00

DEPS

Roll Dart SDK from 7f3ea1c3bc27 to 6f5bd26b293d (1 revision) (flutter/engine#49720)

2024-01-11 17:49:57 +00:00

Description

No description provided

328 MiB

Languages

Dart 75.4%

C++ 16.4%

Objective-C++ 2.7%

Java 2.7%

Objective-C 0.6%

Other 1.8%