aquasecurity/trivy
Auf GitHub ansehenfeat(opensuse): add `MicroOS` and `Leap Micro` support
Open
#8.409 geöffnet am 17. Feb. 2025
help wantedscan/vulnerability
Repository-Metriken
- Stars
- (35.000 Stars)
- PR-Merge-Metriken
- (Durchschn. Merge 5T 2h) (53 gemergte PRs in 30 T)
Beschreibung
Description
OpenSUSE has 2 server versions:
We may add support for these OSes
Vulnerability detection
These OSes are based on Tumbleweed and Leap (immutable OS versions), so we can use advisories for these versions.
But we cannot match OS versions correctly.
for example, MicroOS uses timestamp as version (see https://github.com/aquasecurity/trivy/pull/8202#issuecomment-2659348797).
As a compromise, we can still add support for these OSes.
In this case, users can detect OS packages and create SBOM files.
To detect vulnerabilities they can use the --distro flag (but they will have to select the correct OS version themselves)
See comments from https://github.com/aquasecurity/trivy/pull/8202 for more details.