Trivy: Support Fedora

[urbaniak]

Any chances getting support for Fedora?

[knqyf263]

@urbaniak Thank you for your request. Although I want to support Fedora, I don't know whether Fedora has the security advisory. Trivy needs the security advisory by the distribution to detect vulnerabilities. Let me know if you know anything.

[ghost]

Hello @knqyf263 ,
I think that you need to use this url to restrict to security : https://bodhi.fedoraproject.org/updates/?type=security
It also offers an RSS : https://bodhi.fedoraproject.org/rss/updates/?type=security
Fedora has others things about Updates and Security that you can find in the wiki : https://fedoraproject.org/wiki/Security_Bugs#Fedora_Security_Advisories
Regards

[knqyf263]

@colundrum Great! This is valuable information. How many users are using fedora on container?

[ghost]

@knqyf263 statistics for fedora official docker images are here : https://hub.docker.com/v2/repositories/library/fedora/
I read at this time : "pull_count": 49053602

[knqyf263]

@colundrum Thank you for the information. It's large number. It might be better to support Fedora.
Welcome contributor!