RHEL kernels not reporting vulnerabilities

[mostlikelee]

Fleet version:

Web browser and operating system:

---

💥  Actual behavior

Vulns that should show up for RHEL (CentOS and Fedora) OS' Linux kernels are not shown in Fleet.

🛠️ To fix

• Update goval-dictionary to add arch support for RHEL (in progress)

• Publish RHEL goval-dictionary sqlite to vulnerabilities repo (see amazon linux)

• Update fleet to use sqlite for kernel scanning (not all package scanning to keep test scope lower)

• @noahtalerman: Remove "coming soon" sentence from the vulnerability processing guide:

🧑‍💻  Steps to reproduce

1. Enroll a RHEL (CentOS or Fedora) host in Fleet.
2. Run vulns processing
3. Note that the Linux kernel shows up as software for this host, but does not have any vulnerabilities.

🕯️ More info (optional)

N/A

[getvictor]