-
Feature Request
-
Resolution: Unresolved
-
Undefined
-
None
-
None
-
False
-
None
-
False
-
-
-
Feature request to support vulnerability scanning for PHP, Rust and Go languages
Add vulnerability scanning support for PHP, Rust and Go languages, either leveraging related package managers of layer-based checks (like in Python or Java).
The feature would have the advantage of providing a better competition with other scanners that already provide extensive language support.
Customer Sogei (EMEA/MED/ITALY, SFDC Account ID 001300000094WfeAAE) is conducting a Poc for RHACS, and expressed the desire to see support for PHP, Rust and Go languages under the vulnerability scan features. They already build their own PHP and Go images and have interest on Rust for future developments.
During a session one of the stakeholders directly compared our supported languages and runtimes list with the support matrix of Trivy (https://github.com/aquasecurity/trivy/blob/main/docs/vulnerability/detection/language.md). Ideally, the same could be achieved on our side with Claircore modules to add support of new languages and distributions.
We think that this could be a useful enhancement for many customers focused on the image vulnerability monitoring, one of the most important features associated to a container security solution.