fix: update varnish CPE IDs

Current varnish CPE ID is deprecated, so update it to avoid missing
latest CVEs. While at it, also add debian and alpine test packages.

Signed-off-by: Fabrice Fontaine <[email protected]>

Author: ffontaine

cve_bin_tool/checkers/varnish.py

@@ -4,7 +4,8 @@
 
 """
 CVE checker for varnish
-https://www.cvedetails.com/vulnerability-list/vendor_id-12937/product_id-26407/Varnish-cache-Varnish.html
+https://www.cvedetails.com/product/118293/Varnish-Cache-Project-Varnish-Cache.html?vendor_id=27905
+https://www.cvedetails.com/product/118294/Varnish-software-Varnish-Cache.html?vendor_id=26396
 """
 from cve_bin_tool.checkers import Checker
 
@@ -19,4 +20,7 @@ class VarnishChecker(Checker):
     ]
     FILENAME_PATTERNS = [r"varnish"]
     VERSION_PATTERNS = [r"varnish-([0-9]+\.[0-9]+\.[0-9]+)"]
-    VENDOR_PRODUCT = [("varnish-cache", "varnish")]
+    VENDOR_PRODUCT = [
+        ("varnish_cache_project", "varnish_cache"),
+        ("varnish-software", "varnish_cache"),
+    ]

test/condensed-downloads/varnish-7.7.3-r0.apk.tar.gz

@@ -2,13 +2,30 @@
 # SPDX-License-Identifier: GPL-3.0-or-later
 
 mapping_test_data = [
-    {"product": "varnish", "version": "4.1.1", "version_strings": ["varnish-4.1.1"]}
+    {
+        "product": "varnish_cache",
+        "version": "4.1.1",
+        "version_strings": ["varnish-4.1.1"],
+    }
 ]
 package_test_data = [
     {
         "url": "https://kojipkgs.fedoraproject.org/packages/varnish/4.0.5/1.el7/x86_64/",
         "package_name": "varnish-4.0.5-1.el7.x86_64.rpm",
-        "product": "varnish",
+        "product": "varnish_cache",
         "version": "4.0.5",
-    }
+    },
+    {
+        "url": "http://ftp.debian.org/debian/pool/main/v/varnish/",
+        "package_name": "varnish_6.5.1-1+deb11u3_amd64.deb",
+        "product": "varnish_cache",
+        "version": "6.5.1",
+        "other_products": ["zlib"],
+    },
+    {
+        "url": "https://dl-cdn.alpinelinux.org/alpine/v3.22/main/x86_64/",
+        "package_name": "varnish-7.7.3-r0.apk",
+        "product": "varnish_cache",
+        "version": "7.7.3",
+    },
 ]