vcio-api-v3:Add a pipeline for exporting VulnerableCode data to FederatedCode

[keshav-space]

https://github.com/aboutcode-data/vulnerablecode-data

[keshav-space]

Completed in

• Add pipeline to federate package vulnerabilities #2159
• Export incremental updates on subsequent runs of FederatedCode pipeline #2183

To federate package security advisory:

• Clone repo

  git clone https://github.com/aboutcode-org/vulnerablecode.git && cd vulnerablecode
  

• Generate envfile

  make envfile
  

• Add these configs in .env file

  FEDERATEDCODE_VULNERABILITIES_REPO=""
  FEDERATEDCODE_GIT_SERVICE_TOKEN=""
  FEDERATEDCODE_GIT_SERVICE_NAME=""
  FEDERATEDCODE_GIT_SERVICE_EMAIL=""
  

• Build and run

  docker compose build
  docker compose up
  

View run logs at http://localhost/pipelines/federate_vulnerabilities_v2/runs/