feat: dpkg (#76), scanning of distroless container images with quay/c…

…lair

Dockerfile

@@ -1,4 +1,6 @@
 FROM gcr.io/distroless/java:11
 COPY target/*.jar app.jar
+COPY scripts/Dpkg.java Dpkg.java
+RUN ["java", "Dpkg.java"]
+USER 65534:65534
 CMD ["app.jar"]
-EXPOSE 8080

scripts/Dpkg.java

@@ -0,0 +1,21 @@
+import java.io.*;
+
+class Dpkg {
+  public static void main(String[] args) throws IOException {
+    File dir = new File("/var/lib/dpkg/status.d/");
+    PrintWriter pw = new PrintWriter("/var/lib/dpkg/status");
+    String[] fileNames = dir.list();
+    for (String fileName : fileNames) {
+      System.out.println("Handling file: " + fileName);
+      File f = new File(dir, fileName);
+      BufferedReader br = new BufferedReader(new FileReader(f));
+      String line = br.readLine();
+      while (line != null) {
+        pw.println(line);
+        line = br.readLine();
+      }
+      pw.println();
+      pw.flush();
+    }
+  }
+}