fix(csaf): finalize db schema

[psegedy]

RHINENG-7862

further changes will be added once #1073 is completed

Complete Schema

(it's not cve_detail table but cve, I'll fix the diagram later, code should be correct)

Secure Coding Practices Checklist GitHub Link

• https://github.com/RedHatInsights/secure-coding-checklist

Secure Coding Checklist

• Input Validation
• Output Encoding
• Authentication and Password Management
• Session Management
• Access Control
• Cryptographic Practices
• Error Handling and Logging
• Data Protection
• Communication Security
• System Configuration
• Database Security
• File Management
• Memory Management
• General Coding Practices

[jira-linking]

Commits missing Jira IDs:
3242f22
18a67a4
9a5351f
f03a383
dbb0958
9781447
6a129c2
93b69e8
8850d9e
161bee3
ce61a92
51ba2d7
1f1a428
Referenced Jiras:
https://issues.redhat.com/browse/RHINENG-7862

[codecov-commenter]

Codecov Report

Attention: Patch coverage is 82.18391% with 62 lines in your changes are missing coverage. Please review.

Project coverage is 62.80%. Comparing base (45fdf5e) to head (1f1a428).

Files	Patch %	Lines
vmaas/reposcan/database/csaf_store.py	82.74%	34 Missing ⚠️
vmaas/reposcan/redhatcsaf/csaf_controller.py	59.25%	11 Missing ⚠️
vmaas/common/batch_list.py	0.00%	7 Missing ⚠️
vmaas/common/config.py	0.00%	4 Missing ⚠️
vmaas/reposcan/redhatcsaf/modeling.py	96.93%	3 Missing ⚠️
vmaas/common/date_utils.py	0.00%	1 Missing ⚠️
vmaas/common/logging_utils.py	0.00%	1 Missing ⚠️
vmaas/common/rpm_utils.py	0.00%	1 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #1076      +/-   ##
==========================================
+ Coverage   61.66%   62.80%   +1.14%     
==========================================
  Files          69       69              
  Lines        6445     6652     +207     
==========================================
+ Hits         3974     4178     +204     
- Misses       2471     2474       +3     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[psegedy]

We will need to update cvemap for ephemeral because cves from csaf are missing in the current cvemap used for testing

[mtclinton]

/retest

[psegedy]

Based on logs we still have an issue - it tried to insert duplicate row, I will investigate

2024-03-20 11:39:50,952:ERROR:vmaas.reposcan.database.object_store:Failure while inserting data into csaf_product: 'Traceback (most recent call last):\n  File "/vmaas/vmaas/reposcan/database/csaf_store.py", line 262, in _insert_missing_products\n    rows = execute_values(\n           ^^^^^^^^^^^^^^^\n  File "/usr/local/lib64/python3.11/site-packages/psycopg2/extras.py", line 1299, in execute_values\n    cur.execute(b\'\'.join(parts))\npsycopg2.errors.UniqueViolation: duplicate key value violates unique constraint "csaf_product_cpe_id_package_name_id_idx"\nDETAIL:  Key (cpe_id, package_name_id)=(907, 12550) already exists.\n'|

Edit:
It happens when there is the same cpe mapped to 2 different product_ids (used only to map vulnerability from vulnerabilities.product_status.known_affected to cpe)

[jdobes]

/retest