feat: add check-advisories to check BRSA fields

Signed-off-by: Piyush Jena <[email protected]>

Author: piyush-jena

Cargo.lock

@@ -20,6 +20,7 @@ members = [
     "tools/testsys-config",
     "tools/unplug",
     "tools/update-metadata",
+    "tools/advisory-checker",
 
     "twoliter",
     "twoliter/src/tool-crates/*",
@@ -53,6 +54,7 @@ pre-build = [
 ]
 
 [workspace.dependencies]
+advisory-checker = { version = "0.1", path = "tools/advisory-checker", artifact = [ "bin:advisory-checker" ] }
 amispec = { version = "0.1", path = "tools/amispec" }
 bottlerocket-types = { version = "0.0.16", git = "https://github.com/bottlerocket-os/bottlerocket-test-system", tag = "v0.0.16" }
 bottlerocket-variant = { version = "0.1", path = "tools/bottlerocket-variant" }
@@ -75,6 +77,7 @@ testsys-config = { version = "0.1", path = "tools/testsys-config" }
 testsys-model = { version = "0.0.16", git = "https://github.com/bottlerocket-os/bottlerocket-test-system", tag = "v0.0.16" }
 
 twoliter = { version = "0.15.1", path = "twoliter", artifact = [ "bin:twoliter" ] }
+twoliter-tool-advisory-checker = { version = "0.1", path = "twoliter/src/tool-crates/advisory-checker" }
 twoliter-tool-buildsys = { version = "0.1", path = "twoliter/src/tool-crates/buildsys" }
 twoliter-tool-embedded-bundle = { version = "0.1", path = "twoliter/src/tool-crates/embedded-bundle" }
 twoliter-tool-pipesys = { version = "0.1", path = "twoliter/src/tool-crates/pipesys" }
@@ -133,6 +136,7 @@ nix = "0.30"
 nonzero_ext = "0.3"
 num_cpus = "1"
 num-traits = "0.2"
+nutype = "0.6"
 once_cell = "1.21"
 olpc-cjson = "0.1"
 proc-macro2 = "1"

Cargo.toml

@@ -11,6 +11,7 @@ libc.workspace = true
 lzma-rs.workspace = true
 once_cell.workspace = true
 rand.workspace = true
+regex.workspace = true
 reqwest.workspace = true
 serde.workspace = true
 serde_json.workspace = true
@@ -19,4 +20,5 @@ tempfile.workspace = true
 tokio = { workspace = true, features = ["fs", "process", "rt-multi-thread"] }
 toml.workspace = true
 twoliter = { workspace = true }
+advisory-checker = { workspace = true }
 which.workspace = true