Detect ELF security features

[wagoodman]

This is a PoC for detecting specific ELF security features from discovered binaries (mostly ported from the bash script logic found in checksec). Specifically:

• stack canaries
• NX
• RelRO
• PIE
• SafeStack
• CFI
• Clang Fortify
• selfrando (deferred)

This extends the file attributes for that binary in the SBOM with a new Executable section.

Deferred

• add macho security features Add Mach-O security feature detection #2497
• add pe security features Add PE security feature detection #2498
• add selfrando fixture and write detection mechanism in Add selfrando detection to the ELF security feature detections #2496

Closes #2434

[wagoodman]

JSON schema diff for reviewers:

# diff schema/json/schema-16.0.0.json schema/json/schema-16.0.1.json
3c3
<   "$id": "anchore.io/schema/syft/json/16.0.0/document",
---
>   "$id": "anchore.io/schema/syft/json/16.0.1/document",
562a563,601
>       ]
>     },
>     "ELFSecurityFeatures": {
>       "properties": {
>         "symbolTableStripped": {
>           "type": "boolean"
>         },
>         "stackCanary": {
>           "type": "boolean"
>         },
>         "nx": {
>           "type": "boolean"
>         },
>         "relRO": {
>           "type": "string"
>         },
>         "pie": {
>           "type": "boolean"
>         },
>         "dso": {
>           "type": "boolean"
>         },
>         "safeStack": {
>           "type": "boolean"
>         },
>         "cfi": {
>           "type": "boolean"
>         },
>         "fortify": {
>           "type": "boolean"
>         }
>       },
>       "type": "object",
>       "required": [
>         "symbolTableStripped",
>         "nx",
>         "relRO",
>         "pie",
>         "dso"
608a648,661
>       ]
>     },
>     "Executable": {
>       "properties": {
>         "format": {
>           "type": "string"
>         },
>         "elfSecurityFeatures": {
>           "$ref": "#/$defs/ELFSecurityFeatures"
>         }
>       },
>       "type": "object",
>       "required": [
>         "format"
635a689,691
>         },
>         "executable": {
>           "$ref": "#/$defs/Executable"

[spiffcs]

Looks good! I agree with the security features additions and don't have comments about this going in as the first pass for ELF type with extra executable formats to follow.

I had two questions about the schema version and some presentation concerns that are in a few main library catalogers and how we want to look at those going into v1.0