feat: use cveb.in mirror by default

[b31ngd3v]

part of #3181

[terriko]

The initial run is still using --nvd json in https://github.com/intel/cve-bin-tool/blob/main/.github/workflows/testing.yml

For backwards compatibility, I think we should keep "json" as an option so as not to break people's scripts, but have it now mean the same as json-mirror (e.g. treat it like syntactic sugar). I suspect a lot of people use the --nvd json option right now for update/cache refresh jobs and in CI environments where API/API2 were performing poorly.

[terriko]

Also, I'm excited that this is finally happening! 🎆 🍾

[codecov-commenter]

Codecov Report

Merging #3265 (883c2da) into main (3fb32c6) will decrease coverage by 0.17%.
Report is 49 commits behind head on main.
The diff coverage is 70.00%.

@@            Coverage Diff             @@
##             main    #3265      +/-   ##
==========================================
- Coverage   81.11%   80.95%   -0.17%     
==========================================
  Files         716      724       +8     
  Lines       11114    11314     +200     
  Branches     1495     1532      +37     
==========================================
+ Hits         9015     9159     +144     
- Misses       1706     1743      +37     
- Partials      393      412      +19     

Flag	Coverage Δ
longtests	80.43% <70.00%> (+5.04%)	⬆️
win-longtests	78.74% <70.00%> (-0.29%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

Files Changed	Coverage Δ
test/test_cli.py	88.77% <ø> (+2.10%)	⬆️
cve_bin_tool/cli.py	66.09% <33.33%> (-0.86%)	⬇️
cve_bin_tool/data_sources/nvd_source.py	55.55% <85.71%> (-0.27%)	⬇️

... and 34 files with indirect coverage changes

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more

[terriko]

This looks good to go, but I'm going to wait 'till Monday to merge it so I'm actually at my computer more frequently if we start seeing weirdness.

[terriko]

Okay, I think we're good to go. I'm going to enable this and we'll see if anything misbehaves over the next few days.