Script to modify RHEL8 OVAL file to evaluate Rocky Linux 8

rocky8-oval.sed

# sed script to replace RHEL8 OVAL definition to evaluate with Rocky Linux

# signature detection
s/199e2f91fd431d51/15af5dac6d745a60/g

# centos detection
s/\^redhat-release/\^rocky-release/g
s@/etc/redhat-release@/etc/rocky-release@g

# rocky uses module_, while RHEL8 uses module+
# module comparison: strip the module release sequence and commit SHA
#
# IMPORTANT: this makes module version checks inexact
# consequence: if EVR is same between two patches, scan will report old package as vulnerable
#  - assumption: modules version string is module-EVR-SEQ-GITCKSUM
#  - guess: SEQ and GITCKSUM are artifacts of build and VCS
#  - rocky and RHEL differ in SEQ and GITCKSUM. Mapping is impossible.

s/module+\([^+]*\)+[^+]*+[0-9a-zA-Z]*/module_\1/g