Always return the upstream aliases when no alias groups are generated #2374
Open
Description
Describe the bug
Some vulnerabilities in OSV do not mention alias whereas the source link has alias data.
To Reproduce
https://vuln.go.dev/ID/GO-2024-2947.json mentions two aliases whereas https://api.osv.dev/v1/vulns/GO-2024-2947 does not.
Similar behaviour observed in case of GO-2024-2918, GHSA-v6v8-xj6m-xwqh, GO-2024-2963
Expected behaviour
If alias is available in source data, same should be provided by OSV.
Screenshots
If applicable, add screenshots to help explain your problem.
Additional context
Add any other context about the problem here.