feat(server): add version endpoint

[nikpivkin]

Description

Added an endpoint to get the trivy and db versions.

Example output:

curl -s 0.0.0.0:8080/version | jq
{
  "Version": "dev",
  "VulnerabilityDB": {
    "Version": 2,
    "NextUpdate": "2023-07-25T14:15:29.876639806Z",
    "UpdatedAt": "2023-07-25T08:15:29.876640206Z",
    "DownloadedAt": "2023-07-25T09:36:25.599004Z"
  },
  "JavaDB": {
    "Version": 1,
    "NextUpdate": "2023-07-28T01:03:52.169192565Z",
    "UpdatedAt": "2023-07-25T01:03:52.169192765Z",
    "DownloadedAt": "2023-07-25T09:37:48.906152Z"
  },
  "PolicyBundle": {
    "Digest": "sha256:829832357626da2677955e3b427191212978ba20012b6eaa03229ca28569ae43",
    "DownloadedAt": "2023-07-23T11:40:33.122462Z"
  }
}

Related issues

• Close Add version endpoint to trivy server #715

Checklist

• I've read the guidelines for contributing to this repository.
• I've followed the conventions in the PR title.
• I've added tests that prove my fix is effective or that my feature works.
• I've updated the documentation with the relevant information (if needed).
• I've added usage information (if the PR introduces new options)
• I've included a "before" and "after" example to the description (if the PR is a user interface change).

[nikpivkin]

@knqyf263 Have an idea where we can place the version.go file? I have temporarily added this to the utils package.

Is this a suitable place in the documentation where we can add information about endpoints?

[knqyf263]

@knqyf263 Have an idea where we can place the version.go file? I have temporarily added this to the utils package.

We may want to add a new package version. Then, can we move this variable to the package?

trivy/cmd/trivy/main.go

Line 17 in 0707569

version = "dev"

We also need to update the version embedding.

trivy/goreleaser.yml

Line 9 in 0707569

- -X main.version={{.Version}}

Is this a suitable place in the documentation where we can add information about endpoints?

Yes.

[knqyf263]

I want to make it read-only.

Suggested change

	Version = "dev"
	version = "dev"

Then, can we add Version() string or AppVersion() string?

[knqyf263]

nit: https://github.com/golang/go/wiki/CodeReviewComments#initialisms

Suggested change

	func formatDbMetadata(title string, meta metadata.Metadata) string {
	func formatDBMetadata(title string, meta metadata.Metadata) string {

[knqyf263]

nit:

Suggested change

	func BuildVersionInfo(appVersion string, cacheDir string) VersionInfo {
	func NewVersionInfo(appVersion string, cacheDir string) VersionInfo {

[knqyf263]

Also, do we need to pass appVersion here? There is a version info in this package?

[knqyf263]

You also need to update magefile

trivy/magefiles/magefile.go

Line 40 in e1c2a8c

return fmt.Sprintf("-s -w -X=main.version=%s", ver), nil