Image scanning should not simply show no vulnerabilities for outdated images

[jandubois]

Problem Description

E.g. scanning opensuse/leap:42.3 shows "There are no records to show".

Running the scanner inside the VM shows:

2025-02-14T15:37:13-08:00	INFO	Detected OS	family="opensuse-leap" version="42.3"
2025-02-14T15:37:13-08:00	INFO	[opensuse-leap] Detecting vulnerabilities...	os_version="42.3" pkg_num=132
2025-02-14T15:37:13-08:00	INFO	Number of language-specific files	num=0
2025-02-14T15:37:13-08:00	WARN	This OS version is no longer supported by the distribution	family="opensuse-leap" version="42.3"
2025-02-14T15:37:13-08:00	WARN	The vulnerability detection may be insufficient because security updates are not provided

Proposed Solution

The app should check the OS metadata for the End Of Service Life indicator .Metadata.OS.EOSL and then show a corresponding message as the scan result.