PSP-3163: update scan config to enable osv

[alanpchua]

Changes release scanner config to use osv over oss since oss support is being phased out.

Target Release

1.15.x

Rollback Plan

• If a change needs to be reverted, we will roll out an update to the code within 7 days.

Changes to Security Controls

Are there any changes to security controls (access controls, encryption, logging) in this pull request? If so, explain.

Just a change to scan config no changes expected.

CHANGELOG entry

• This change is user-facing and I added a changelog entry.
• This change is not user-facing.

[hashicorp-cla-app]

All committers have signed the CLA.

[SarahFrench]

I took a look at the related Jira ticket and all looks good to me

[mildwonkey]

Hi @alanpchua 👋🏻 Quick question, should this have been backported to our release branch(es)? As it is this won't run on any of the v1.14 releases, not until 1.15-alpha

[alanpchua]

Hi @alanpchua 👋🏻 Quick question, should this have been backported to our release branch(es)? As it is this won't run on any of the v1.14 releases, not until 1.15-alpha

@mildwonkey Thanks for pointing that out. It's probably better if this change goes out to every maintained version of terraform currently. Should I create another PR for v1.14 releases ?

[mildwonkey]

Yes, that'll be best and sorry I didn't comment on this faster - thank you!

We might have a 1.13 patch coming up as well - it's not certain, but it's probably a good idea to open a PR for the v1.13 branch as well (that one's entirely up to you)