feat(checker): add fish checker

Signed-off-by: Fabrice Fontaine <[email protected]>

Author: ffontaine

cve_bin_tool/checkers/__init__.py

@@ -109,6 +109,7 @@
     "file",
     "firefox",
     "firejail",
+    "fish",
     "flac",
     "fluidsynth",
     "freeradius",

cve_bin_tool/checkers/fish.py

@@ -0,0 +1,20 @@
+# Copyright (C) 2025 Orange
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+
+"""
+CVE checker for fish
+
+https://www.cvedetails.com/product/43564/Fishshell-Fish.html?vendor_id=17623
+
+"""
+from __future__ import annotations
+
+from cve_bin_tool.checkers import Checker
+
+
+class FishChecker(Checker):
+    CONTAINS_PATTERNS: list[str] = []
+    FILENAME_PATTERNS: list[str] = []
+    VERSION_PATTERNS = [r"fish-([0-9]+\.[0-9]+\.[0-9]+)"]
+    VENDOR_PRODUCT = [("fishshell", "fish")]

test/condensed-downloads/fish-3.1.2-r4.apk.tar.gz

@@ -0,0 +1,34 @@
+# Copyright (C) 2025 Orange
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+mapping_test_data = [
+    {"product": "fish", "version": "3.1.0", "version_strings": ["fish-3.1.0"]}
+]
+package_test_data = [
+    {
+        "url": "http://rpmfind.net/linux/fedora/linux/development/rawhide/Everything/aarch64/os/Packages/f/",
+        "package_name": "fish-4.0.2-1.fc43.aarch64.rpm",
+        "product": "fish",
+        "version": "4.0.2",
+        "other_products": ["rust"],
+    },
+    {
+        "url": "http://ftp.debian.org/debian/pool/main/f/fish/",
+        "package_name": "fish_3.1.2-3+deb11u1_amd64.deb",
+        "product": "fish",
+        "version": "3.1.2",
+    },
+    {
+        "url": "https://downloads.openwrt.org/releases/packages-19.07/x86_64/packages/",
+        "package_name": "fish_3.1.0-1_x86_64.ipk",
+        "product": "fish",
+        "version": "3.1.0",
+    },
+    {
+        "url": "https://dl-cdn.alpinelinux.org/alpine/v3.13/main/x86_64/",
+        "package_name": "fish-3.1.2-r4.apk",
+        "product": "fish",
+        "version": "3.1.2",
+        "other_products": ["gcc"],
+    },
+]