fix(redhat-oval): do not use -including-unpatched

aquasecurity · knqyf263 · Jan 28, 2022 · Jan 14, 2021 · Jan 14, 2021 · Jan 14, 2021
commit b0ee34932ac960589fb2546308e74085f2574fc5
@@ -26,7 +26,7 @@ const (
 	// the same bucket name as Red Hat Security Data API
 	platformFormat = "Red Hat Enterprise Linux %s"
 
-	rhelFileFormat = "rhel-%s-including-unpatched"
+	rhelFileFormat = "rhel-%s"
 )
 
 var (
@@ -68,6 +68,11 @@ func (vs VulnSrc) Update(dir string) error {
 				continue
 			}
 
+			// Skip unpatched vulnerabilities until OVAL v2 includes necessary information
+			if strings.Contains(f.Name(), "-including-unpatched") {
+				continue
+			}
+
 			parsedDetails, err := parseOVALStream(filepath.Join(versionDir, f.Name()))
 			if err != nil {
 				return xerrors.Errorf("failed to parse OVAL stream: %w", err)