You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
If Rocky Linux is fully RHEL compatible, why don't you just recognize Rocky Linux as RHEL and use goval-dictionary?
For example, Vuls is currently operating under this policy.
However, Rocky Linux suuport issue(aquasecurity/trivy#1053) on Trivy discusses whether it can be easily regarded as the same as RHEL. Probably the same can be said for CentOS/AlmaLinux.
I have been thinking about this issue while proposing an implementation to support Rocky Linux/AlmaLinux scanning in Trivy, and I think that there may be a problem in applying OVAL provided by RHEL to CentOS/Rocky Linux/AlmaLinux as it is, in order to scan accurately. Rocky Linux and AlmaLinux have published errata, and we may change to use the information in their respective errata instead of RHEL's OVAL in the near future.
Is it possible to add support for Rocky Linux? An open-source enterprise operating system designed to be 100% bug-for-bug compatible with RHEL.
The text was updated successfully, but these errors were encountered: