.lua files were not detected and scanned

[mpachaia]

Some of the files with .lua extensions were not detected while scanning for vulnerabilities.

reference url: https://github.com/Kong/kong/

[cuixq]

I tried to look up the extractor in osv-scalibr and only find the extractor for luarocks. Is this what you are referencing to?

[CsatariGergely]

Hi I'm working with @mpachaia on this issue. To be hones we do not know what package manager is used in Kong, we just realized that the .lua files in the Kong project are ignored by osv-scanner.

[another-rex]

I don't think we currently support any lua files: https://google.github.io/osv-scanner/supported-languages-and-lockfiles/

It looks like Kong uses bazel to manage dependencies, which we don't currently support.