Initial scanner families support

[FrimIdan]

Added initial scanner families support
Implemented vulnerabilities and sbom families logic
Implemented a temporary CLI run to simulate the run based on the .families.yaml config file

Pending openclarity/kubeclarity#263 for the job factory support

CLI example run

$ make cli && ./cli/bin/vmclarity --config .families.yaml --output results.txt
Building CLI ...
total 394552
-rwxr-xr-x  1 idanf  staff  191143184 Nov 27 13:13 vmclarity
INFO[0000] init config
INFO[0000] Using config file (.families.yaml): &{SBOM:{Enabled:true AnalyzersList:[syft gomod] Inputs:[{Input:node:slim InputType:image}] MergeWith:[{SbomPath:nginx.11.cdx.json}] AnalyzersConfig:{Registry:{SkipVerifyTLS:false UseHTTP:false Auths:[{Authority:authority Username:username Password:password Token:token}]} Analyzer:{OutputFormat:cyclonedx-json AnalyzerList:[] Scope:Squashed TrivyConfig:{Timeout:300}} Scanner:{ScannersList:[] GrypeConfig:{LocalGrypeConfig:{UpdateDB:false DBRootDir: ListingURL: Scope:} RemoteGrypeConfig:{GrypeServerAddress: GrypeServerTimeout:0s} Mode:} DependencyTrackConfig:{APIKey: Host: ProjectName: ProjectVersion: ShouldDeleteProject:false DisableTLS:false InsecureSkipVerify:false FetchVulnerabilitiesRetryCount:0 FetchVulnerabilitiesRetrySleep:0s}} LocalImageScan:false}} Vulnerabilities:{Enabled:true ScannersList:[grype] Inputs:[{Input:nginx:1.12 InputType:image}] InputFromSbom:true ScannersConfig:{Registry:{SkipVerifyTLS:false UseHTTP:false Auths:[{Authority:authority Username:username Password:password Token:token}]} Analyzer:{OutputFormat: AnalyzerList:[] Scope: TrivyConfig:{Timeout:0}} Scanner:{ScannersList:[] GrypeConfig:{LocalGrypeConfig:{UpdateDB:true DBRootDir:/tmp/ ListingURL:https://toolbox-data.anchore.io/grype/databases/listing.json Scope:squashed} RemoteGrypeConfig:{GrypeServerAddress: GrypeServerTimeout:2m0s} Mode:LOCAL} DependencyTrackConfig:{APIKey: Host: ProjectName: ProjectVersion: ShouldDeleteProject:false DisableTLS:false InsecureSkipVerify:false FetchVulnerabilitiesRetryCount:0 FetchVulnerabilitiesRetrySleep:0s}} LocalImageScan:false}} Secrets:{Enabled:true ScannersList:[gitleaks] Inputs:[{Input:/dir InputType:dir} {Input:/rootfs InputType:rootfs}]} Rootkits:{Enabled:false} Malware:{Enabled:false} Misconfiguration:{Enabled:false} Exploits:{Enabled:false}}
INFO[0000] Running...                                    app=vmclarity
INFO[0000] SBOM Run...                                   app=vmclarity family=sbom
INFO[0000] Skip generating hash in the case of image
INFO[0000] Called syft analyzer on source registry:node:slim  analyzer=syft app=vmclarity family=sbom
INFO[0045] Skipping analyze unsupported source type: image  analyzer=gomod app=vmclarity family=sbom
INFO[0045] Got result for job "gomod"                    app=vmclarity family=sbom
INFO[0047] Sending successful results                    analyzer=syft app=vmclarity family=sbom
INFO[0047] Got result for job "syft"                     app=vmclarity family=sbom
INFO[0047] Merging result from "gomod"                   app=vmclarity family=sbom
INFO[0047] Merging result from "syft"                    app=vmclarity family=sbom
INFO[0047] Merging result from "nginx.11.cdx.json"       app=vmclarity family=sbom
INFO[0047] SBOM Done...                                  app=vmclarity family=sbom
INFO[0047] Vulnerabilities Run...                        app=vmclarity family=vulnerabilities
INFO[0047] Using input from SBOM results                 app=vmclarity family=vulnerabilities
INFO[0047] Loading DB. update=true                       app=vmclarity family=vulnerabilities mode=local scanner=grype
INFO[0048] Gathering packages for source registry:nginx:1.12  app=vmclarity family=vulnerabilities mode=local scanner=grype
INFO[0076] Found 469 vulnerabilities                     app=vmclarity family=vulnerabilities mode=local scanner=grype
INFO[0076] Sending successful results                    app=vmclarity family=vulnerabilities mode=local scanner=grype
INFO[0076] Got result for job "grype"                    app=vmclarity family=vulnerabilities
INFO[0076] Merging result from "grype"                   app=vmclarity family=vulnerabilities
INFO[0076] Loading DB. update=true                       app=vmclarity family=vulnerabilities mode=local scanner=grype
INFO[0077] Gathering packages for source sbom:/tmp/sbom  app=vmclarity family=vulnerabilities mode=local scanner=grype
INFO[0077] Found 1382 vulnerabilities                    app=vmclarity family=vulnerabilities mode=local scanner=grype
INFO[0078] Sending successful results                    app=vmclarity family=vulnerabilities mode=local scanner=grype
INFO[0078] Got result for job "grype"                    app=vmclarity family=vulnerabilities
INFO[0078] Merging result from "grype"                   app=vmclarity family=vulnerabilities
INFO[0078] Vulnerabilities Done...                       app=vmclarity family=vulnerabilities
INFO[0078] Secrets Run...                                app=vmclarity family=secrets
INFO[0078] Secrets Done...                               app=vmclarity family=secrets
INFO[0078] Writing results to sbom.results.txt...        app=vmclarity
INFO[0078] Writing results to vulnerabilities.results.txt...  app=vmclarity