Fetch SLES Linux security patching information

[ghost]

Current Behavior

Some of our products are based on SLES Linux (SUSE Linux Enterprise Server) and we have tried to use DependencyTrack for creating the SBOM and vulnerability analysis. However, we have noticed that these tools do not consider the SLES security patches, thus reporting false positive vulnerabilities that have been already fixed by SLES security patches.

Proposed Behavior

Introduce support for fetching SLES Linux security patching information into DependencyTrack.

Checklist

• [X] I have read and understand the contributing guidelines
• [X] I have checked the existing issues for whether this enhancement was already requested

[nscuro]

Although not a 100% solution, I think the Trivy analyzer support (https://github.com/DependencyTrack/dependency-track/issues/3251) may help here.