Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add support for the Mageia distro #2449

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Conversation

dfandrich
Copy link

This is basically cargo-culted from existing entries so I don't know if this is
done properly or not. Unfortunately, Mageia vulnerabilities don't seem to be in
the vulnerability database (according to "grype db providers") so I'm not able
to perform a full test.

@wagoodman
Copy link
Contributor

Hi @dfandrich ! The first step to adding support for a new distro is to add a new vunnel provider that reads vulnerability advisories from the intended source. We have some documentation on the best way to get started adding a provider. I don't know much about Mageia, but since it's RPM based there shouldn't be a need to add support in syft to detect packages (🎉 ). Once the vunnel provider is written then it's easier to test the grype changes needed to use that data (we can update this PR later).

Might you be interested in contributing the vunnel provider for this distro?

@dfandrich
Copy link
Author

I can probably do that. Is there a reason vunnel doesn't pull from osv.dev? That would eliminate the need for all the Alpine, Debian, GSA, Red Hat, SLES, Ubuntu and Wolfi parsers since they're already in osv.dev.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants