Support security scanning for openEuler Linux

[wjunLu]

Description

What's openEuler?

openEuler is an open source, free Linux distribution platform. The platform provides an open community for global developers to build an open, diversified, and architecture-inclusive software ecosystem. openEuler is also an innovative platform that
encourages everyone to propose new ideas, explore new approaches, and practice new solutions.

Learn more, please visit https://www.openeuler.org/en/

Trivy does not support openEuler

We can see that the operating systems currently supported by trivy for security detection does not include openEuler(see https://aquasecurity.github.io/trivy/v0.50/docs/coverage/os/).

Support openEuler

Now, openEuler has 2,345,659 users, 18,072 contributors and 1,501 organization members(see https://datastat.openeuler.org/en/overview). It is necessary to support such a very mature open source operating system.

Target

Container Image

Scanner

Vulnerability

[knqyf263]

We would like to see the level of demand from the community.

Now, openEuler has 2,345,659 users, 18,072 contributors and 1,501 organization members(see https://datastat.openeuler.org/en/overview). It is necessary to support such a very mature open source operating system.

If they're not interested in scanning openEuler with Trivy, we may not want to add support for it.

[wjunLu]

As a committer of the openEuler community, I can say that the demand for using trivy to scan openEuler images is very high!

1. openEuler has some repositories of container image in hub.oepkgs.net, which use the harbor-trivy-adapter plugin to perform vulnerability scanning of openEuler container images. However, trivy does not support to scan openEuler, making scanning results meaningless.

2. We are considering to build a new hub, and planing to use trivy as the security scanner for openEuler.

We very much hope that trivy can support for scanning openEuler!

[knqyf263]

We are considering to build a new hub, and planing to use trivy as the security scanner for openEuler.

Cool. Then, we'll look into it. Do you mind adding openEuler as an adopter after the new hub is out?

[wjunLu]

Using as an adopter may be not the optimized way to support openEuler OS. If this feature can't be accepted finally, we will consider to support openEuler by using adopter.