From b68f7d312948051cc4f9602eea9f048efae35a31 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Aur=C3=A9lien=20Baumann?= <aurelien.baumann@docker.com>
Date: Mon, 27 Jul 2026 11:50:26 -0400
Subject: [PATCH] feat(datasources): add Docker Hardened Images (DHI) test
 datasource

Onboard the Docker Hardened Images OSV advisory feed to the osv.dev test
instance. Records are DHI-prefixed OSV JSON published under osv/ in the
docker-hardened-images/advisories-test git repository. The Docker Hardened
Images ecosystem is already registered (osv/ecosystems/_ecosystems.py, schema
enum) so strict_validation is enabled.
---
 source_test.yaml | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/source_test.yaml b/source_test.yaml
index 86e7aeba34e..b5b81ac31e1 100644
--- a/source_test.yaml
+++ b/source_test.yaml
@@ -250,6 +250,22 @@
   editable: False
   strict_validation: True
 
+- name: 'dhi'
+  versions_from_repo: False
+  type: 0
+  ignore_patterns: ['^(?!DHI-).*$']
+  directory_path: 'osv'
+  repo_url: 'https://github.com/docker-hardened-images/advisories-test.git'
+  detect_cherrypicks: False
+  extension: '.json'
+  db_prefix: ['DHI-']
+  accepted_ecosystems: ['Docker Hardened Images']
+  ignore_git: True
+  human_link: 'https://scout.docker.com/v/{{ BUG_ID }}'
+  link: 'https://github.com/docker-hardened-images/advisories-test/blob/main/'
+  editable: False
+  strict_validation: True
+
 - name: 'drupal'
   versions_from_repo: False
   type: 0