OSV importer does not consider startYear

[dejanb]

Creating an OSV importer like

http -v POST localhost:8080/api/v1/importer/osv-github "osv[source]=https://github.com/github/advisory-database" "osv[path]=advisories" "osv[startYear]=2024" "osv[disabled]:=false" "osv[period]=30m" "osv[v3Signatures]:=true"

I would expect that startYear is used in a similar fashion like in the CSAF importer. The start year is however ignored and the whole repo is being ingested.

$ http GET localhost:8080/api/v1/importer/osv-github
HTTP/1.1 200 OK
access-control-allow-credentials: true
access-control-expose-headers: etag, content-type
content-encoding: gzip
content-type: application/json
date: Mon, 09 Dec 2024 12:47:48 GMT
etag: "86abcee4-617b-48d4-8cc8-1e1edc9d2351"
transfer-encoding: chunked
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
vary: accept-encoding

{
    "configuration": {
        "osv": {
            "disabled": false,
            "path": "advisories",
            "period": "30m",
            "source": "https://github.com/github/advisory-database"
        }
    },
    "lastChange": "2024-12-09T09:57:05.77046Z",
    "name": "osv-github",
    "progress": {
        "current": 147114,
        "estimatedCompletion": "2024-12-09T14:55:47.188473Z",
        "estimatedSecondsRemaining": 7679,
        "percent": 0.57149625,
        "rate": 14.36321,
        "total": 257419
    },
    "state": "running"
}

[ctron]

Should be closed by #1101