Syscollector - MacPorts package manager inventory support.

[MiguelazoDS]

Description

With the purpose of adding support to Syscollector for MacPorts package manager in Mac OS agents, a spike was performed as part of #15726 always having in mind that the main goal is to provide the information needed to Vulnerability Detector to run against those packages (ports in MacPorts slang).

It is required to parse the information from the package manager database (registry.db) which is a SQlite database to get the information from installed packages.

DoD

• Evaluate and implement a way to handle multiple architectures if needed.
• Consider and evaluate the possibility to have multiple versions of the same package.
• Evaluate a proper default value for those key items that are required by the vulnerability detector.
• Unit testing.
• Implement the database parser.
• Verify the proper functioning.
• Add QA test to be executed with GitHub Actions.
• Add QA test specific for macports packages.
• Refactor to move SQLite wrapper implementation.

[Dwordcito]

Hey team! Please add your planning poker estimate with Zenhub @tdrauncieal @pereyra-m @MiguelazoDS

[MiguelazoDS]

Findings

Vendor missing

This implementation (#16089) should fix the issue with MacPorts packages too since they do not report the vendor either.

Multiple architectures.

It was not found a situation when this happens, anyway for MacOS the architecture is ignored.

Multiple packages version

Only one package can be active at a time, although multiple packages can be installed.

[pereyra-m]

Blocked by #16901

[MiguelazoDS]

Blocked by #17186 (created after #16901)

[MiguelazoDS]

Update 05/24/23

After rebase checks passed.