feat: add third party flag for os packages
Description
There are cases when package has been installed from package manager (apk/dpkg/rpm), but that package is not vendor package.
Add third-party-os-pkgs flag to skip this package and parse files of this package as language packages.
TODO:
- [x] support of dpkg
- [x] support of apk
- [x] support of rpm
- [x] update docs
Related issues
- Close #4046
- Close #4257
Checklist
- [x] I've read the guidelines for contributing to this repository.
- [x] I've followed the conventions in the PR title.
- [x] I've added tests that prove my fix is effective or that my feature works.
- [x] I've updated the documentation with the relevant information (if needed).
- [ ] I've added usage information (if the PR introduces new options)
- [ ] I've included a "before" and "after" example to the description (if the PR is a user interface change).
Thank you!
This PR is stale because it has been labeled with inactivity.
This PR is stale because it has been labeled with inactivity.
This PR is stale because it has been labeled with inactivity.
This PR is stale because it has been labeled with inactivity.
Do we have an ETA on when this might merge?
This PR is stale because it has been labeled with inactivity.
Closing in favor of https://github.com/aquasecurity/trivy/pull/7288