feat(reposcan): add CSAF sync task

[michalslomczynski]

Secure Coding Practices Checklist GitHub Link

• https://github.com/RedHatInsights/secure-coding-checklist

Secure Coding Checklist

• Input Validation
• Output Encoding
• Authentication and Password Management
• Session Management
• Access Control
• Cryptographic Practices
• Error Handling and Logging
• Data Protection
• Communication Security
• System Configuration
• Database Security
• File Management
• Memory Management
• General Coding Practices

[jira-linking]

Commits missing Jira IDs:
971fc92

[codecov-commenter]

Codecov Report

Attention: 17 lines in your changes are missing coverage. Please review.

Comparison is base (6961630) 61.56% compared to head (971fc92) 61.11%.

Files	Patch %	Lines
vmaas/reposcan/reposcan.py	34.61%	17 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #1063      +/-   ##
==========================================
- Coverage   61.56%   61.11%   -0.45%     
==========================================
  Files          66       68       +2     
  Lines        6041     6216     +175     
==========================================
+ Hits         3719     3799      +80     
- Misses       2322     2417      +95     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[psegedy]

Tests are failing because sync now takes too long and also the local development with docker-compose will be harder because you'd need to wait at least an hour for the sync.
I'd suggest to do something similar as we are doing with OVAL and repolists. Let's add modified changes.csv (e.g. only with 2023 cves) and jsons referenced in changes.csv to https://github.com/RedHatInsights/vmaas-data. Then we can set env to point to vmaas-data repo and download files from there. The env would need to be set in reposcan.env and in app-interface vmaas ephemeral deploy target.
@mtclinton what do you think?
@michalslomczynski would you mind doing that?

[michalslomczynski]

Will do, thanks for proposing resolution.

[mtclinton]

yes, I like this solution :)

[psegedy]

/retest