add rocky and bitnami to grype-db-observed-fix-date packages

[cyse-labs]

bitnami, rocky, chainguard-libraries missing grype-db-observed-fix-date packages when use oras to pull from https://github.com/orgs/anchore/packages?q=grype-db-observed-fix-date&tab=packages&q=grype-db-observed-fix-date

[willmurphyscode]

It looks like Bitnami and Chainguard are available now. The fix date data for rocky isn't, but we expect to add fix dates to it in the future.

[cyse-labs]

This is log when I run vunnel:

[ERROR] failed to fetch fix date database for bitnami: Issue with https://ghcr.io/v2/anchore/grype-db-observed-fix-date/bitnami/manifests/latest: Forbidden
[WARNING] no fix date database found for provider chainguard-libraries
[WARNING] no fix date database found for provider rocky

Code in repo:
image_ref = f"ghcr.io/anchore/grype-db-observed-fix-date/{self.provider}:latest"
Then you only check 404 in grype_db_first_observed download otherwise raise error:

except ValueError as e:
    # if this is a 404 or not found error, log a warning and continue
    if "not found" in str(e).lower():
        self.logger.warning(f"no fix date database found for provider {self.provider}")
        self._not_found = True
    else:
        self.logger.error(f"failed to fetch fix date database for {self.provider}: {e}")
        raise e
except Exception as e:
    self.logger.error(f"failed to fetch fix date database for {self.provider}: {e}")
    raise

Note: chainguard-libraries not chainguard

It looks like Bitnami and Chainguard are available now. The fix date data for rocky isn't, but we expect to add fix dates to it in the future.

[cyse-labs]

@willmurphyscode Can you check ghcr.io/anchore/grype-db-observed-fix-date again?

[willmurphyscode]

My mistake! I've updated the title. Fix dates are still a work in progress, and I expect these will be added as the work progresses.