feat(checker): add zziplib checker (#5156)

Signed-off-by: Fabrice Fontaine <[email protected]>

Author: ffontaine

cve_bin_tool/checkers/__init__.py

@@ -434,6 +434,7 @@
     "znc",
     "zsh",
     "zstandard",
+    "zziplib",
 ]
 
 VendorProductPair = collections.namedtuple("VendorProductPair", ["vendor", "product"])

cve_bin_tool/checkers/zziplib.py

@@ -0,0 +1,20 @@
+# Copyright (C) 2025 Orange
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+
+"""
+CVE checker for zziplib
+
+https://www.cvedetails.com/product/36035/Zziplib-Project-Zziplib.html?vendor_id=16135
+
+"""
+from __future__ import annotations
+
+from cve_bin_tool.checkers import Checker
+
+
+class ZziplibChecker(Checker):
+    CONTAINS_PATTERNS: list[str] = []
+    FILENAME_PATTERNS: list[str] = []
+    VERSION_PATTERNS = [r"zziplib ([0-9]+\.[0-9]+\.[0-9]+)"]
+    VENDOR_PRODUCT = [("zziplib_project", "zziplib")]

test/condensed-downloads/zziplib-bin_0.13.62-3.2+deb10u1_amd64.deb.tar.gz

@@ -0,0 +1,21 @@
+# Copyright (C) 2025 Orange
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+mapping_test_data = [
+    {"product": "zziplib", "version": "0.13.62", "version_strings": ["zziplib 0.13.62"]}
+]
+package_test_data = [
+    {
+        "url": "http://ftp.debian.org/debian/pool/main/z/zziplib/",
+        "package_name": "zziplib-bin_0.13.62-3.2+deb10u1_amd64.deb",
+        "product": "zziplib",
+        "version": "0.13.62",
+    },
+    {
+        "url": "https://dl-cdn.alpinelinux.org/alpine/v3.11/community/x86_64/",
+        "package_name": "zziplib-utils-0.13.69-r2.apk",
+        "product": "zziplib",
+        "version": "0.13.69",
+        "other_products": ["gcc"],
+    },
+]