feat: add experimental support for updating config files

cmd/osv-scanner/internal/helper/flags.go

@@ -207,5 +207,19 @@ func BuildCommonScanFlags(defaultExtractors []string) []cli.Flag {
 			Name:  "experimental-no-default-plugins",
 			Usage: "disable default plugins, instead using only those enabled by --experimental-plugins",
 		},
+		&cli.StringFlag{
+			Name:  "experimental-update-config-ignores",
+			Usage: "update config file(s) to ignore vulnerabilities - must be one of: none, unused, or all",
+			Action: func(_ context.Context, _ *cli.Command, s string) error {
+				// todo: can we do something other than "none"?
+				//  - feels like that might mean "remove all ignores"
+				//  - ideally empty string would be nice, but might not work properly as a flag default?
+				if s == "none" || s == "unused" || s == "all" {
+					return nil
+				}
+
+				return fmt.Errorf("unsupported option \"%s\" - must be none, unused, or all", s)
+			},
+		},
 	}
 }

cmd/osv-scanner/internal/helper/getters.go

@@ -57,5 +57,6 @@ func GetExperimentalScannerActions(cmd *cli.Command, client *http.Client) osvsca
 		PluginsNoDefaults:      cmd.Bool("experimental-no-default-plugins"),
 		HTTPClient:             client,
 		FlagDeprecatedPackages: cmd.Bool("experimental-flag-deprecated-packages"),
+		UpdateConfigIgnores:    cmd.String("experimental-update-config-ignores"),
 	}
 }

cmd/osv-scanner/internal/testcmd/copy.go

@@ -8,7 +8,7 @@ import (
 	"testing"
 )
 
-func copyFile(from, to string) (string, error) {
+func CopyFile(from, to string) (string, error) {
 	b, err := os.ReadFile(from)
 	if err != nil {
 		return "", fmt.Errorf("could not read test file: %w", err)
@@ -37,7 +37,7 @@ func CopyFileFlagTo(t *testing.T, tc Case, flagName string, dir string) string {
 		return ""
 	}
 
-	newPath, err := copyFile(flagValue, filepath.Join(dir, filepath.Base(flagValue)))
+	newPath, err := CopyFile(flagValue, filepath.Join(dir, filepath.Base(flagValue)))
 
 	if err != nil {
 		t.Fatalf("%v", err)

cmd/osv-scanner/internal/testcmd/git.go

@@ -43,7 +43,7 @@ func SetupGitFixtures() (func(), error) {
 	}
 
 	for _, f := range gitIgnoreFiles {
-		gitignoreFile, err := copyFile(f, filepath.Join(filepath.Dir(f), ".gitignore"))
+		gitignoreFile, err := CopyFile(f, filepath.Join(filepath.Dir(f), ".gitignore"))
 
 		if err != nil {
 			return cleaner, err