osv: re-enable transitive scanning without pypi (#4848)

Plugins are a new osv-scanner/osv-scalibr way of disabling specific
features, which give us finer control over what features to toggle.

Signed-off-by: Spencer Schrock <[email protected]>

Author: spencerschrock

clients/osv.go

@@ -61,10 +61,10 @@ func (v osvClient) ListUnfixedVulnerabilities(
 		GitCommits:        gitCommits,
 		CompareOffline:    v.local,
 		DownloadDatabases: v.local,
+		// swap out the transitive requirements scanning for offline extractor
 		ExperimentalScannerActions: osvscanner.ExperimentalScannerActions{
-			TransitiveScanningActions: osvscanner.TransitiveScanningActions{
-				Disabled: true,
-			},
+			PluginsEnabled:  []string{"python/requirements"},
+			PluginsDisabled: []string{"python/requirementsenhanceable"},
 		},
 	}) // TODO: Do logging?