Support for http/socks proxy

[Hritik14]

Currently we do not exclusively support http proxy because of using svn to fetch git tags. Though, it is possible to configure the svn binary to use proxied settings, it is not the best approach.

Possible fixes:

• Ship with a local svn binary and allow explicit http_proxy in the config file (.env) and use it project wide
• Somehow use both svn and github api to fetch the tags in suitable situations
• Implement basic svn client protocol in python
• ??

Related:

• vulnerable code uses svn to check git tags #554
• debian_oval: cannot connect behind a proxy #556
• nginx import -> Name or service not known #568

[pombredanne]

I think we should stop using SVN for git tags and always require an API token for GitHub access... otherwise things are really unstable at times.

[pombredanne]

We may need still to have proxy support irrespective of using SVN.
@tardyp I recall that's something that was a need for you... do you think we are all good otherwise?

[tardyp]

hi @pombredanne we have now deployed vulnerablecode in our intranet, and I think we upstreamed all of our fixes.

We'll do a rebase shortly and make sure of it.