fedcode-next: Collect existing fix commits and patches open datasets

[pombredanne]

We are adding support for formal fix commits tracking in:

• fedcode-next: Improve tracking of fix commits #1695

We should then collect existing fix commit datasets. Here is a running list:

• OSV data
• Android fixes from https://github.com/quarkslab/aosp_dataset
• @copernico project-kb https://github.com/SAP/project-kb/tree/vulnerability-data
  And the tool https://github.com/SAP/project-kb/tree/main/prospector designed to work with https://github.com/eclipse/steady . We already have an importer in https://github.com/aboutcode-org/vulnerablecode/blob/main/vulnerabilities/importers/kaybee.py for this data, but this needs to be updated for fix commits
  • and also: https://github.com/SAP/project-kb/tree/main/MSR2019
• GNU Libc fix commits Add glibc advisories #1362
• Import data from https://github.com/nluedtke/linux_kernel_cves #564 for https://github.com/pombredanne/linux_kernel_cves now archived
• Add support in Apache Tomcat to collect commits #2129
• Collect fix commits from https://github.com/google/vulncode-db/  #118
• @JafarAkhondali https://github.com/JafarAkhondali/Morefixes and https://dl.acm.org/doi/abs/10.1145/3663533.3664036
• @leonmoonen https://github.com/secureIT-project/CVEfixes
• C/C++ fixes from https://github.com/ZeoVan/MSR_20_Code_vulnerability_CSV_Dataset
• MegaVul: A C/C++ Vulnerability Dataset with Comprehensive Code Representation - https://arxiv.org/abs/2406.12415v1
• Other datasets from Zenodo https://zenodo.org/search?q=vulnerability+fix+commit&f=resource_type%3Adataset&l=list&p=1&s=10&sort=bestmatch
• vulncodedb