feat: add support for new wolfi/chainguard apk database location CN-150 (#667)

Update the apk database scanning logic to look at /usr/lib/apk/db/installed in addition to /lib/apk/db/installed. Recently, Chainguard/Wolfi images have moved the location of /lib/apk to /usr/lib/apk. Without this change, snyk container scanning fails to find and analyze the apk package database on newer Chainguard/Wolfi container images.

Author: bgardiner

lib/inputs/apk/static.ts

@@ -6,7 +6,8 @@ import { streamToString } from "../../stream-utils";
 export const getApkDbFileContentAction: ExtractAction = {
   actionName: "apk-db",
   filePathMatches: (filePath) =>
-    filePath === normalizePath("/lib/apk/db/installed"),
+    filePath === normalizePath("/lib/apk/db/installed") ||
+    filePath === normalizePath("/usr/lib/apk/db/installed"),
   callback: streamToString,
 };