[nonGallery] Ingest withdrawn data in GitHub GraphQL

src/GitHubVulnerabilities2Db/Collector/AdvisoryQueryBuilder.cs

@@ -23,6 +23,7 @@ public string CreateSecurityAdvisoriesQuery(DateTimeOffset? updatedSince = null,
         databaseId
         permalink
         severity
+        withdrawnAt
         updatedAt
         " + CreateVulnerabilitiesConnectionQuery() + @"
       }

src/GitHubVulnerabilities2Db/GraphQL/SecurityVulnerability.cs

@@ -13,6 +13,7 @@ public class SecurityVulnerability : INode
         public SecurityVulnerabilityPackage Package { get; set; }
         public string VulnerableVersionRange { get; set; }
         public SecurityVulnerabilityPackageVersion FirstPatchedVersion { get; set; }
+        public DateTimeOffset? WithdrawnAt { get; set; }
         public DateTimeOffset UpdatedAt { get; set; }
         public SecurityAdvisory Advisory { get; set; }
     }

tests/GitHubVulnerabilities2Db.Facts/AdvisoryIngestorFacts.cs

@@ -52,6 +52,7 @@ public async Task IngestsAdvisoryWithoutVulnerability(bool withdrawn)
                         Assert.Equal(advisory.DatabaseId, vulnerability.GitHubDatabaseKey);
                         Assert.Equal(PackageVulnerabilitySeverity.Moderate, vulnerability.Severity);
                         Assert.Equal(advisory.Permalink, vulnerability.AdvisoryUrl);
+                        Assert.Equal(withdrawn, advisory.WithdrawnAt != null);
                     })
                     .Returns(Task.CompletedTask)
                     .Verifiable();