help wantedscan/vulnerability
描述
Description
OpenSUSE has 2 server versions:
We may add support for these OSes
Vulnerability detection
These OSes are based on Tumbleweed and Leap (immutable OS versions), so we can use advisories for these versions.
But we cannot match OS versions correctly.
for example, MicroOS uses timestamp as version (see https://github.com/aquasecurity/trivy/pull/8202#issuecomment-2659348797).
As a compromise, we can still add support for these OSes.
In this case, users can detect OS packages and create SBOM files.
To detect vulnerabilities they can use the --distro flag (but they will have to select the correct OS version themselves)
See comments from https://github.com/aquasecurity/trivy/pull/8202 for more details.