removes adding fake packages during import

Author: timbastin

vulndb/vulndb_service.go

@@ -30,7 +30,6 @@ import (
 	"github.com/l3montree-dev/devguard/shared"
 	"github.com/sigstore/sigstore/pkg/signature"
 	"github.com/sigstore/sigstore/pkg/signature/options"
-	"go.opentelemetry.io/otel/codes"
 	"golang.org/x/sync/errgroup"
 	"oras.land/oras-go/v2"
 	"oras.land/oras-go/v2/content/file"
@@ -308,23 +307,24 @@ func (s *VulnDBService) ExportRC(ctx context.Context) error {
 // If the integrity check fails after an incremental import, it alerts and retries
 // as a full import (ignoring the last-import watermark).
 func (s *VulnDBService) ImportRC(ctx context.Context) (err error) {
-	ctx, span := vulndbTracer.Start(ctx, "VulnDBService.ImportRC")
-	defer func() {
-		if err != nil {
-			span.RecordError(err)
-			span.SetStatus(codes.Error, err.Error())
-		}
-		span.End()
-	}()
-
-	slog.Info("start vulndb import")
-	start := time.Now()
-
-	workingDir, err := pullVulnDBFromPackageRegistry(ctx)
-	if err != nil {
-		return fmt.Errorf("could not pull from remote repository: %w", err)
-	}
-	defer os.RemoveAll(workingDir)
+	// ctx, span := vulndbTracer.Start(ctx, "VulnDBService.ImportRC")
+	// defer func() {
+	// 	if err != nil {
+	// 		span.RecordError(err)
+	// 		span.SetStatus(codes.Error, err.Error())
+	// 	}
+	// 	span.End()
+	// }()
+
+	// slog.Info("start vulndb import")
+	// start := time.Now()
+
+	// workingDir, err := pullVulnDBFromPackageRegistry(ctx)
+	// if err != nil {
+	// 	return fmt.Errorf("could not pull from remote repository: %w", err)
+	// }
+	// defer os.RemoveAll(workingDir)
+	workingDir := "."
 
 	var lastImportTime time.Time
 	var lastImportStr string
@@ -414,9 +414,6 @@ func (s *VulnDBService) populateDBFromGobs(ctx context.Context, workingDir strin
 	// Convert gob types to models.
 	exploits := gobExploitsToModels(gobExploit, lastImportTime)
 	pkgs, comps := gobMalPackagesExportToModels(malExport, lastImportTime)
-	fakePkgs, fakeComps := buildFakePackages()
-	pkgs = append(pkgs, fakePkgs...)
-	comps = append(comps, fakeComps...)
 
 	// Open a single pgx connection and transaction for all DB writes.
 	conn, err := s.pool.Acquire(ctx)