More data in manifest files

[mssalvatore]

Define a new format for manifest files that includes the release codename, source package for each binary, src and binary package versions, and installation status.

Something along the lines of,

(lsb_release -c && dpkg-query -f '${binary:Package},${Source:Package},${Source:Version},${Status}\n' -W) | tee manifest.txt

could be used to generate such as file.

The key is keeping it simple enough that someone can't type it in, but also having it contain all the necessary data. We could also provide a manifest_generator that generates the manifests. The whole point of manifests is that you don't need to install CVEScan in order to scan your systems, so this is a somewhat difficult balance to achieve.

[mssalvatore]

After spending some more time looking at dpkg-query, I think that

(lsb_release -c && dpkg-query -f '${db:Status-Abbrev},${binary:Package},${Version},${source:Package},${Source:Version}\n' -W) | tee manifest.txt

is probably a superior way to format the manifest file.