System-files for osv-scanner

[cav]

To make the review of your request easier, please use the following template to provide all the required details and also include any other information that may be relevant.

---

• name: osv-scanner
• description: description of the snap
• snapcraft: osv-scanner-snap/snapcraft.yaml at candidate · iosifache/osv-scanner-snap · GitHub
• upstream: link to the upstream repository if open-source or ‘PRIVATE’ otherwise
• upstream-relation: working with upstream to implement
• interfaces:
  • system-files (var-lib-dpkg-status):
    • request-type: auto-connection
    • reasoning: read-only access required to be able to scan the dpkg status file of the current system (e.g like seen Scan `status` files used by Ubuntu · Issue #1293 · google/osv-scanner · GitHub).
  • system-files (lib-apk-db-installed):
    • request-type: auto-connection
    • reasoning: same as above for APK systems

[store-requests-bot]

This request has been added to the queue for review by the @reviewers team.

[jslarraz]

Hey Evan,

It looks good to me (+1) and it is expected for the snap functionality (#voteFor)

Could you please rename the interfaces as:

• hostfs-var-lib-dpkg-status
• hostfs-lib-apk-db-installed

[yomonokio]

Hey @cav

+1 (#voteFor) from my side too, for granting the requested system-files interfaces to the osv-scanner snap

[store-requests-bot]

Voting period has ended. This request is approved with 2 votes for and 0 votes against.

[yomonokio]

This request has been approved and the publisher is vetted. This is now live.