docs: add info about flavors

aquasecurity · Nov 2, 2024 · 19c7a05 · 19c7a05
1 parent a120c5f
commit 19c7a05
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/docs/docs/coverage/os/oracle.md b/docs/docs/coverage/os/oracle.md
@@ -28,6 +28,20 @@ See [here](../../scanner/vulnerability.md#data-sources).
 ### Fixed Version
 Trivy takes fixed versions from [Oracle security advisories][alerts].
 
+#### Flavors
+Trivy detects the flavor for version of the found package and finds vulnerabilities only for that flavor.
+
+|  Flavor  |                Format                | Example                        |
+|:--------:|:------------------------------------:|--------------------------------|
+|  normal  | version without `fips` and `ksplice` | 3.6.16-4.el8                   |
+|   fips   |               `*_fips`               | 10:3.6.16-4.0.1.el8_fips       |
+| ksplice1 |            `*.ksplice1.*`            | 2:2.34-60.0.3.ksplice1.el9_2.7 |
+| ksplice1 |            `*.ksplice2.*`            | 151.0.1.ksplice2.el8           |
+
+
+For example Trivy finds [CVE-2021-33560](https://linux.oracle.com/cve/CVE-2021-33560.html) only for the `normal` and `fips` flavors. 
+For the `ksplice1` or `ksplice` flavors, [CVE-2021-33560](https://linux.oracle.com/cve/CVE-2021-33560.html) will be skipped.
+
 ### Severity
 Trivy determines vulnerability severity based on the severity metric provided in [Oracle security advisories][alerts].
 For example, the security patch for [CVE-2023-0464][CVE-2023-0464] is provided as [ELSA-2023-2645][ELSA-2023-2645].