aquasecurity/trivy
Voir sur GitHubfeat(opensuse): add `MicroOS` and `Leap Micro` support
Open
#8 409 ouverte le 17 févr. 2025
help wantedscan/vulnerability
Métriques du dépôt
- Stars
- (35 000 stars)
- Métriques de merge PR
- (Merge moyen 5j 2h) (53 PRs mergées en 30 j)
Description
Description
OpenSUSE has 2 server versions:
We may add support for these OSes
Vulnerability detection
These OSes are based on Tumbleweed and Leap (immutable OS versions), so we can use advisories for these versions.
But we cannot match OS versions correctly.
for example, MicroOS uses timestamp as version (see https://github.com/aquasecurity/trivy/pull/8202#issuecomment-2659348797).
As a compromise, we can still add support for these OSes.
In this case, users can detect OS packages and create SBOM files.
To detect vulnerabilities they can use the --distro flag (but they will have to select the correct OS version themselves)
See comments from https://github.com/aquasecurity/trivy/pull/8202 for more details.