-
Notifications
You must be signed in to change notification settings - Fork 2.3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
chore(redhat): handle CentOS Stream releases #6216
Conversation
|
@knqyf263 my last commit adds a new |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think we should also think about EOL.
trivy/pkg/detector/ospkg/redhat/redhat.go
Lines 45 to 61 in e5f7d29
redhatEOLDates = map[string]time.Time{ | |
"4": time.Date(2017, 5, 31, 23, 59, 59, 0, time.UTC), | |
"5": time.Date(2020, 11, 30, 23, 59, 59, 0, time.UTC), | |
"6": time.Date(2024, 6, 30, 23, 59, 59, 0, time.UTC), | |
// N/A | |
"7": time.Date(3000, 1, 1, 23, 59, 59, 0, time.UTC), | |
"8": time.Date(3000, 1, 1, 23, 59, 59, 0, time.UTC), | |
"9": time.Date(3000, 1, 1, 23, 59, 59, 0, time.UTC), | |
} | |
centosEOLDates = map[string]time.Time{ | |
"3": time.Date(2010, 10, 31, 23, 59, 59, 0, time.UTC), | |
"4": time.Date(2012, 2, 29, 23, 59, 59, 0, time.UTC), | |
"5": time.Date(2017, 3, 31, 23, 59, 59, 0, time.UTC), | |
"6": time.Date(2020, 11, 30, 23, 59, 59, 0, time.UTC), | |
"7": time.Date(2024, 6, 30, 23, 59, 59, 0, time.UTC), | |
"8": time.Date(2021, 12, 31, 23, 59, 59, 0, time.UTC), | |
} |
Now, I'm confused about its security advisories. CentOS Stream is ahead of RHEL, but the FAQ mentioned as below.
Security issues will be updated in CentOS Stream after they are solved in the current RHEL release
https://centos.org/distro-faq/
It sounds like the same as CentOS.
@YoannGh Do you know anything?
This PR is stale because it has been labeled with inactivity. |
Description
This PR adds support for the CentOS Stream OS type family and detects it through the existing CentOS analyzer.
It uses the
CentOS Stream
prefix in the/etc/centos-release
file to detect this OS type family.Related issues
Checklist