Please also parse /usr/share/buildinfo for "content manifests"

[cgwalters]

Description

See quay/claircore@7250a05 and openshift/os#670 (comment)

TL;DR basically for bootc systems we want /var to be as empty as possible - /usr should hold immutable read-only state like this.

This file is an ill-defined mess and general consensus seems to be that tooling should be scanning SBOMs instead, but basically for now please just make the same change Clair did and parse that location too.

Target

None

Scanner

None

[knqyf263]

Thanks for sharing that. We added this task to the milestone. Track #8213