feat: add xeol-io/xeol (#16756)

* feat: add xeol-io/xeol

[xeol-io/xeol](https://github.com/xeol-io/xeol): A scanner for end-of-life (EOL) software in container images, filesystems, and SBOMs

* fix(xeol-io/xeol): cx gr

pkgs/xeol-io/xeol/pkg.yaml

@@ -0,0 +1,4 @@
+packages:
+  - name: xeol-io/[email protected]
+  - name: xeol-io/xeol
+    version: v0.1.0

pkgs/xeol-io/xeol/registry.yaml

@@ -0,0 +1,24 @@
+packages:
+  - type: github_release
+    repo_owner: xeol-io
+    repo_name: xeol
+    description: A scanner for end-of-life (EOL) software in container images, filesystems, and SBOMs
+    asset: xeol_{{trimV .Version}}_{{.OS}}_{{.Arch}}.{{.Format}}
+    format: tar.gz
+    overrides:
+      - goos: windows
+        format: zip
+    checksum:
+      type: github_release
+      asset: xeol_{{trimV .Version}}_checksums.txt
+      algorithm: sha256
+    version_constraint: semver(">= 0.9.5")
+    # Verify with SLSA didn't work well
+    # > Verified signature against tlog entry index 44906341 at URL: https://rekor.sigstore.dev/api/v1/log/entries/24296fb24b8ad77a658e74e86e03e7aedcca39eebddebf59310b4d9c463b037951109186d73a5681
+    # > Verifying artifact /var/folders/lk/bw_hsbdd72l9ckd0tz61xz2m0000gn/T/176337015: FAILED: verifying tag: invalid ref: "": unexpected ref type: ""
+    version_overrides:
+      - version_constraint: semver("< 0.9.5")
+        supported_envs:
+          - darwin
+          - linux
+          - amd64