Rust / Cargo is completely broken

[hamiltop]

Description

Raised in #5214 and aquasecurity/trivy-db#353

Something is crossed up in categorizing GHSA as rust vs cargo vulnerabilities. Because they are mistagged, they are ignored and no rust vulnerabilities are reported.

Desired Behavior

When I run a scan in a rust project with a known vulnerability, I expect it to be flagged.

Actual Behavior

Nothing is raised in rust projects.

Reproduction Steps

See https://github.com/aquasecurity/trivy/issues/5214

Target

Git Repository

Scanner

Vulnerability

Output Format

JSON

Mode

Standalone

Debug Output

See https://github.com/aquasecurity/trivy/issues/5214

Operating System

Any

Version

See https://github.com/aquasecurity/trivy/issues/5214

Checklist

• Run trivy image --reset
• Read the troubleshooting

[knqyf263]

Fixed in aquasecurity/trivy-db#355