rhel: add repo_key matching constraint

[crozzy]

As the matcher now no longer queries on repo name, it means the result set returned from the DB is a lot larger. This change limits the results to just those added by the RHEL updater (previously OVAL now VEX).

[crozzy]

This reduces results by around 90% for some packages I analyzed:

select count(*)
FROM 
  "vuln" 
  INNER JOIN "uo_vuln" ON ("vuln"."id" = "uo_vuln"."vuln") 
  INNER JOIN "latest_update_operations" ON (
    "latest_update_operations"."id" = "uo_vuln"."uo"
  ) 
WHERE 
  (
    (
      (
        ("package_name" = 'tar') 
        AND ("package_kind" = 'binary')
      ) 
      OR (
        ("package_name" = 'tar') 
        AND ("package_kind" = 'source')
      )
    ) 
    AND ("package_module" = '') 
    AND (
      "latest_update_operations"."kind" = 'vulnerability'
    )
  )
-- 252

select count(*)
FROM 
  "vuln" 
  INNER JOIN "uo_vuln" ON ("vuln"."id" = "uo_vuln"."vuln") 
  INNER JOIN "latest_update_operations" ON (
    "latest_update_operations"."id" = "uo_vuln"."uo"
  ) 
WHERE 
  (
    (
      (
        ("package_name" = 'tar') 
        AND ("package_kind" = 'binary')
      ) 
      OR (
        ("package_name" = 'tar') 
        AND ("package_kind" = 'source')
      )
    ) 
    AND ("package_module" = '') 
    AND (
      "latest_update_operations"."kind" = 'vulnerability'
    )
    AND (
      "repo_key" = 'rhel-cpe-repository'
    )
  )
-- 21

[codecov]

Codecov Report

Attention: Patch coverage is 0% with 3 lines in your changes missing coverage. Please review.

Project coverage is 55.35%. Comparing base (64d2456) to head (8dd6a35).
Report is 1 commits behind head on main.

Files with missing lines	Patch %	Lines
datastore/postgres/querybuilder.go	0.00%	2 Missing ⚠️
rhel/matcher.go	0.00%	1 Missing ⚠️

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #1398   +/-   ##
=======================================
  Coverage   55.34%   55.35%           
=======================================
  Files         282      282           
  Lines       17839    17841    +2     
=======================================
+ Hits         9873     9875    +2     
- Misses       6931     6932    +1     
+ Partials     1035     1034    -1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[crozzy]

/fast-forward