trivy icon indicating copy to clipboard operation
trivy copied to clipboard

feat(opensuse): add `MicroOS` and `Leap Micro` support

Open DmitriyLewen opened this issue 10 months ago • 1 comments

Description

OpenSUSE has 2 server versions:

We may add support for these OSes

Vulnerability detection

These OSes are based on Tumbleweed and Leap (immutable OS versions), so we can use advisories for these versions.

But we cannot match OS versions correctly. for example, MicroOS uses timestamp as version (see https://github.com/aquasecurity/trivy/pull/8202#issuecomment-2659348797).

As a compromise, we can still add support for these OSes. In this case, users can detect OS packages and create SBOM files. To detect vulnerabilities they can use the --distro flag (but they will have to select the correct OS version themselves)

See comments from https://github.com/aquasecurity/trivy/pull/8202 for more details.

DmitriyLewen avatar Feb 17 '25 05:02 DmitriyLewen

Hello @htcosta I have 2 questions:

  • Can you send os-release file for Leap Micro?
  • Do you have information how we can compare Leap and Leap MIcro version (to detection vulnerabilities)?

DmitriyLewen avatar Feb 17 '25 05:02 DmitriyLewen