ROX-26604: Backport lineage fix to ACS 4.6.x (Scanner 2.35.x)

[dcaravel]

Adds the lineage fix for RHEL images to the Scanner 2.35 branch (targeting ACS 4.6.x).

Backports the lineage fix:

• ROX-26604: Add layer lineage to RHEL v2 data model #1720
• ROX-27618: Add env var to disable RHEL lineage usage #1764

And other 'CI' fixes:

• fix(ci): NVD data and test issues #1737
• fix(ci): qa:apache-server-scannerci #1750
• fix e2e #1708
• fix(e2e): updated description #1693

git cherry-pick 111f6f5acb4cadb5c2201fc0a3f84e134bc2e6a8
git cherry-pick ceec7298652d0d8bed7d18bc1080dd6a9e9fe24c
git cherry-pick 71cbd4bfd96a3971024f408cbe6c43b7f392a7cd
git cherry-pick 7be1bc087fff57c40987d4834edf5eae02bff515
git cherry-pick 83e994bb7331c046695e1408f90d16a910ee6432
git cherry-pick 1a50ad032b6502fb4d521d912147c10c3c4050f2

[dcaravel]

/retest

[RTann]

let me cherry-pick some changes to help CI pass

[RTann]

@dcaravel can you rebase?

[dcaravel]

@dcaravel can you rebase?

Done - let's see how it goes...

[openshift-ci]

@dcaravel: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/e2e-tests	04174d0	link	false	/test e2e-tests

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

[vikin91]

I am afraid, this commit broke the RHCOS node scanning. Not sure which particular cherry-picked PR did that, but version 2.35.1 works fine, whereas 2.35.2 is broken, so the bug must be somewhere here.

[dcaravel]

I am afraid, this commit broke the RHCOS node scanning. Not sure which particular cherry-picked PR did that, but version 2.35.1 works fine, whereas 2.35.2 is broken, so the bug must be somewhere here.

Perhaps not 😉 - looks like the RHCOS issue is external data/OVAL related.

[vikin91]

I am afraid, this commit broke the RHCOS node scanning. Not sure which particular cherry-picked PR did that, but version 2.35.1 works fine, whereas 2.35.2 is broken, so the bug must be somewhere here.

Perhaps not 😉 - looks like the RHCOS issue is external data/OVAL related.

Indeed, the deeper investigation has been continued on Slack and there is no clear indication that this PR was faulty 👍