Support Photon OS CVE Feeds

anchore / vunnel

Tool for collecting vulnerability data from various sources (used to build the grype database)

Apache License 2.0

69 stars 25 forks source link

Support Photon OS CVE Feeds #259

Open cjnosal opened 3 years ago

cjnosal commented 3 years ago

What would you like to be added: Support for identifying vulnerable packages in Photon OS

Why is this needed: To ensure photon-based containers are not vulnerable

Additional context: Syft support for Photon: https://github.com/anchore/syft/pull/341 CVE feed: https://packages.vmware.com/photon/photon_cve_metadata/

cburgess commented 2 years ago

I will add that trivy has support for this.

spiffcs commented 2 years ago

👋 Thanks for the issue @xtreme-conor-nosal. Apologies for the wait here, but we're currently working on a way for vulnerability sources easier for community members to add. While we don't have plans to add this support at this exact moment stay tuned for updates...