feat(contrib/snmp2cpe): skip invalid CPE

Author: MaineK00n

contrib/snmp2cpe/pkg/cpe/cpe.go

@@ -2,12 +2,15 @@ package cpe
 
 import (
 	"fmt"
+	"log"
+	"maps"
+	"slices"
 	"strings"
 
 	"github.com/hashicorp/go-version"
+	"github.com/knqyf263/go-cpe/naming"
 
 	"github.com/future-architect/vuls/contrib/snmp2cpe/pkg/snmp"
-	"github.com/future-architect/vuls/contrib/snmp2cpe/pkg/util"
 )
 
 // Convert ...
@@ -424,7 +427,16 @@ func Convert(result snmp.Result) []string {
 		return []string{}
 	}
 
-	return util.Unique(cpes)
+	m := make(map[string]struct{}, len(cpes))
+	for _, c := range cpes {
+		if _, err := naming.UnbindFS(c); err != nil {
+			log.Printf("WARN: skip %q. err: %s", c, err)
+			continue
+		}
+		m[c] = struct{}{}
+	}
+
+	return slices.Collect(maps.Keys(m))
 }
 
 func detectVendor(r snmp.Result) string {