feat(redhat): Add support for Scientific Linux 7

[jcpunk]

Description

This adds support for running against Scientific Linux 7 (another RHEL rebuild popular in scientific communities).

Checklist

• [x] I've read the guidelines for contributing to this repository.
• [x] I've followed the conventions in the PR title.
• [ ] I've added tests that prove my fix is effective or that my feature works.
• [ ] I've updated the documentation with the relevant information (if needed).
• [ ] I've added usage information (if the PR introduces new options)
• [ ] I've included a "before" and "after" example to the description (if the PR is a user interface change).

[CLAassistant]

All committers have signed the CLA.

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[jcpunk]

Odds are I'll need some help...

[jcpunk]

Oops, Scientific linux uses a totally different repo set. How might i define it?

On Sun, Nov 20, 2022, 7:20 AM Teppei Fukuda @.***> wrote:

@.**** commented on this pull request.

In pkg/fanal/analyzer/os/redhatbase/sl.go https://github.com/aquasecurity/trivy/pull/3188#discussion_r1027280115:

+type slOSAnalyzer struct{} + +func (a slOSAnalyzer) Analyze(_ context.Context, input analyzer.AnalysisInput) (*analyzer.AnalysisResult, error) {

• scanner := bufio.NewScanner(input.Content)
• for scanner.Scan() {

• line := scanner.Text()
  

• result := redhatRe.FindStringSubmatch(strings.TrimSpace(line))
  

• if len(result) != 3 {
  

• 	return nil, xerrors.New("sl: invalid sl-release")
  

• }
  

• switch strings.ToLower(result[1]) {
  

• case "sl", "scientific", "scientific linux":
  

• 	return &analyzer.AnalysisResult{
  

• 		OS: &types.OS{Family: aos.Alma, Name: result[2]},
  

Does Scientific Linux use Alma repositories? Normally we need to use different advisories for different distributions.

— Reply to this email directly, view it on GitHub https://github.com/aquasecurity/trivy/pull/3188#pullrequestreview-1187257628, or unsubscribe https://github.com/notifications/unsubscribe-auth/AA2673S7IQARBCASKHDA4VTWJIJQXANCNFSM6AAAAAASCTINGQ . You are receiving this because you authored the thread.Message ID: @.***>

[knqyf263]

At first, security advisories for Scientific Linux should be fetched in vuln-list-update. https://aquasecurity.github.io/trivy/v0.34/community/contribute/pr/#understand-where-your-pull-request-belongs

[github-actions[bot]]

This PR is stale because it has been labeled with inactivity.

[jcpunk]

This is on my backlog, but it may be a bit....

[github-actions[bot]]

This PR is stale because it has been labeled with inactivity.

[knqyf263]

Please let me close this PR since it is not active now. We can be back once it gets ready.