removes osv api fetching, only using osv last modified timestamp

Author: timbastin

database/migrations/20260504101108_drop_updated_created_at.down.sql

@@ -0,0 +1,15 @@
+-- Copyright (C) 2026 l3montree GmbH
+-- 
+-- This program is free software: you can redistribute it and/or modify
+-- it under the terms of the GNU Affero General Public License as
+-- published by the Free Software Foundation, either version 3 of the
+-- License, or (at your option) any later version.
+-- 
+-- This program is distributed in the hope that it will be useful,
+-- but WITHOUT ANY WARRANTY; without even the implied warranty of
+-- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+-- GNU Affero General Public License for more details.
+-- 
+-- You should have received a copy of the GNU Affero General Public License
+-- along with this program.  If not, see <https://www.gnu.org/licenses/>.
+

database/migrations/20260504101108_drop_updated_created_at.up.sql

@@ -0,0 +1,17 @@
+-- Copyright (C) 2026 l3montree GmbH
+-- 
+-- This program is free software: you can redistribute it and/or modify
+-- it under the terms of the GNU Affero General Public License as
+-- published by the Free Software Foundation, either version 3 of the
+-- License, or (at your option) any later version.
+-- 
+-- This program is distributed in the hope that it will be useful,
+-- but WITHOUT ANY WARRANTY; without even the implied warranty of
+-- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+-- GNU Affero General Public License for more details.
+-- 
+-- You should have received a copy of the GNU Affero General Public License
+-- along with this program.  If not, see <https://www.gnu.org/licenses/>.
+
+ALTER TABLE public.cves DROP COLUMN IF EXISTS created_at;
+ALTER TABLE public.cves DROP COLUMN IF EXISTS updated_at;

database/models/cve_model.go

@@ -29,8 +29,6 @@ type cveReference struct {
 type CVE struct {
 	ID                    int64               `json:"id" gorm:"type:bigint;primaryKey;not null;"`
 	CVE                   string              `json:"cve" gorm:"type:text;"`
-	CreatedAt             time.Time           `json:"createdAt" cve:"createdAt"`
-	UpdatedAt             time.Time           `json:"updatedAt" cve:"updatedAt"`
 	DatePublished         time.Time           `json:"datePublished" cve:"datePublished"`
 	DateLastModified      time.Time           `json:"dateLastModified" cve:"dateLastModified"`
 	Weaknesses            []Weakness          `json:"weaknesses" gorm:"foreignKey:CVEID;references:CVE;constraint:OnDelete:CASCADE;" cve:"weaknesses"`

services/csaf_service_test.go

@@ -524,7 +524,7 @@ func setUpVulns() (models.Asset, models.AssetVersion, models.Artifact, []models.
 	assetVersion := models.AssetVersion{Name: "main", AssetID: asset.ID, Type: "branch", CreatedAt: time1, DefaultBranch: true, Slug: "main"}
 	artifact := models.Artifact{ArtifactName: "pkg:devguard/testorg/testgroup/csaf-test", AssetVersionName: assetVersion.Name, AssetID: asset.ID, CreatedAt: time1}
 
-	cve1 := models.CVE{CVE: "GO-2026-4309", CreatedAt: time2, Description: "Test Description", CVSS: 7.50, EPSS: utils.Ptr(0.00753)}
+	cve1 := models.CVE{CVE: "GO-2026-4309", Description: "Test Description", CVSS: 7.50, EPSS: utils.Ptr(0.00753)}
 
 	affectedComponent1 := models.AffectedComponent{Ecosystem: "GIT", PurlWithoutVersion: "pkg:github.com/jetbrains/kotlin", Version: utils.Ptr("v872")}
 	affectedComponent2 := models.AffectedComponent{Ecosystem: "GIT", PurlWithoutVersion: "pkg:github.com/jetbrains/kotlin", Version: utils.Ptr("build-0.7.536")}

transformer/dependency_vuln_transformer.go

@@ -29,8 +29,6 @@ import (
 func CVEToDTO(cve models.CVE) dtos.CVEDTO {
 	return dtos.CVEDTO{
 		CVE:                   cve.CVE,
-		CreatedAt:             cve.CreatedAt,
-		UpdatedAt:             cve.UpdatedAt,
 		DatePublished:         cve.DatePublished,
 		DateLastModified:      cve.DateLastModified,
 		Description:           cve.Description,