Remaining Container Scanning Issues for v2 Official Release

[hogo6002]

This issue tracker used to track container scanning issues specifically for the official v2 release.

Functionality:

• Normalize package names for certain ecosystems osv.dev#3082
• Identify unimportant vulnerabilities from Ubuntu
• bug: failed to handle tar entry with path /bin/envoy: file exceeds read limit
• allow flags after command args, e.g. osv-scanner scan image <image_name> --serve

Testing:

• Add JSON test for container scanning output. #1525

Performance:

Output:

• Container scanning HTML loading animation #1524
• Update vertical output to display container scanning info
• Display license scanning result on HTML output
• Cleanup excessive scalibr logs
• --serve to automatically find a unused port around 8000 rather than immediately failing. (don't need it, as we plan to allow users to specify the port)
• Support git scanning results, currently shows completely blank line
• Lift tooltip z-index so it does not get hidden by the container that it is in.
• Improve contrast/borders of the scroll-able accordion containers
• Allow setting of the port number when using the --serve flag #1555
• Use the new logo in the report #1554

Any issues mentioned in discussion #1521

[another-rex]

And issues listed here: #1274 (comment)