diff --git a/docs/references/strategies/system/rpm/rpm-container.md b/docs/references/strategies/system/rpm/rpm-container.md index 501fc66076..9db660e06e 100644 --- a/docs/references/strategies/system/rpm/rpm-container.md +++ b/docs/references/strategies/system/rpm/rpm-container.md @@ -4,6 +4,22 @@ The RedHat Package Manager (rpm). > This analysis is only executed when container scanning. +## Important Limitations + +**License Identification**: RPM package detection is supported, but license information extraction has limitations: + +- **Full Support**: Alpine (APK) and Debian (DPKG) packages include complete license information. +- **Limited Support**: RHEL and Oracle Linux (OL) RPM packages are detected but may appear as "unlicensed" because: + - License information is not currently extracted from RPM package databases + - Oracle Linux EPEL repositories are not automatically recognized + - Modern RHEL9/OL9 signature formats may cause fetcher issues + +**Impact**: Customers scanning RHEL/OL-based containers may see system packages (like `perl`, `bash`, `coreutils`) marked as "unlicensed" even though license metadata exists in the RPM database. + +**Workaround**: Packages can be manually licensed through the FOSSA web interface. + +**Future Enhancement**: Full RHEL/OL support is on our roadmap. If this is important to you, please reach out to support@fossa.com. + ## Discovery Each RPM installation may use one of several backends: diff --git a/docs/references/subcommands/container/scanner.md b/docs/references/subcommands/container/scanner.md index b19163defd..8fca267d3a 100644 --- a/docs/references/subcommands/container/scanner.md +++ b/docs/references/subcommands/container/scanner.md @@ -225,7 +225,7 @@ The following package managers are supported in container scanning: | ------------------------------------ | ------------------ | ---------------------------------------------------------------- | | Alpine (APK) | :white_check_mark: | [APK Docs](./../../strategies/system/apk/apk.md) | | Debian (DPKG) | :white_check_mark: | [DPKG Docs](./../../strategies/system/dpkg/dpkg.md) | -| RedHat (RPM) | :white_check_mark: | [RPM Docs](../../strategies/system/rpm/rpm-container.md) | +| RedHat (RPM) | :warning: | [RPM Docs](../../strategies/system/rpm/rpm-container.md) | | Python (setuptools, poetry, etc.) | :white_check_mark: | [Python Docs](./../../strategies/languages/python/python.md) | | Javascript (npm, yarn, pnpm, etc.) | :white_check_mark: | [Javascript Docs](./../../strategies/languages/nodejs/nodejs.md) | | Ruby (bundler) | :white_check_mark: | [Ruby](./../../strategies/languages/ruby/ruby.md) |