Support scanning conda environments with arbitrary prefix

[duncanmmacleod]

Description

The conda environment scanning is great, but is currently restricted to only those environments that live under the <conda-root>/envs tree (which is the default location for new environments).

It would be great to be able to scan any conda environment that exists in an arbitrary path, e.g. one created via

conda create --prefix /opt/myenv ...

I think this might 'just' require patching the fileRegex in

trivy/pkg/fanal/analyzer/language/conda/meta/meta.go

Line 21 in de523ff

var fileRegex = regexp.MustCompile(`.*/envs/.+/conda-meta/.+-.+-.+\.json`)

to something more general, like

var fileRegex = regexp.MustCompile(`.*/conda-meta/.+-.+-.+\.json`)

or supporting parsing the CONDA_PREFIX environment variable that is commonly used to indicate the active (or primary) environment.

Target

Container Image

Scanner

Vulnerability