Add GHSA support (#467)

* Change library advisory use github security advisory

* Add java scanner

* Add multi vulnsrc support

* Fix null pointer exception

* Add ghsa mock test

* Delete nuget & java

* Update README

* Fix bug

* refactor: add ghsa

* refactor: Add multi scanner in driver.go

* fix go.mod

* Add scanner.go

* Add parse lockfile

* unexport Driver & delete parse lockfile

* Fix scanner struct

* refactor: scanner -> advisory

* Add Driver

* delete Driver interface

* Add new drivers

* delete types.go

* Fix review

* Merge driver.go ← advisory.go

* Change NewDriver interface

Co-authored-by: Teppei Fukuda <knqyf263@gmail.com>

pkg/detector/library/python/advisory.go

@@ -0,0 +1,58 @@
+package python
+
+import (
+	"strings"
+
+	"github.com/aquasecurity/trivy-db/pkg/vulnsrc/python"
+	"github.com/aquasecurity/trivy/pkg/types"
+
+	"golang.org/x/xerrors"
+
+	"github.com/aquasecurity/trivy/pkg/scanner/utils"
+	"github.com/knqyf263/go-version"
+)
+
+type Advisory struct {
+	vs python.VulnSrc
+}
+
+func NewAdvisory() *Advisory {
+	return &Advisory{
+		vs: python.NewVulnSrc(),
+	}
+}
+
+func (s *Advisory) DetectVulnerabilities(pkgName string, pkgVer *version.Version) ([]types.DetectedVulnerability, error) {
+	advisories, err := s.vs.Get(pkgName)
+	if err != nil {
+		return nil, xerrors.Errorf("failed to get python advisories: %w", err)
+	}
+
+	var vulns []types.DetectedVulnerability
+	for _, advisory := range advisories {
+		if !utils.MatchVersions(pkgVer, advisory.Specs) {
+			continue
+		}
+
+		vuln := types.DetectedVulnerability{
+			VulnerabilityID:  advisory.VulnerabilityID,
+			PkgName:          pkgName,
+			InstalledVersion: pkgVer.String(),
+			FixedVersion:     createFixedVersions(advisory.Specs),
+		}
+		vulns = append(vulns, vuln)
+	}
+	return vulns, nil
+}
+
+func createFixedVersions(specs []string) string {
+	var fixedVersions []string
+	for _, spec := range specs {
+		for _, s := range strings.Split(spec, ",") {
+			if !strings.HasPrefix(s, "<=") && strings.HasPrefix(s, "<") {
+				fixedVersions = append(fixedVersions, strings.TrimPrefix(s, "<"))
+			}
+		}
+	}
+	return strings.Join(fixedVersions, ", ")
+}