Add receipt input JSON and SHA256 hash for CVSS policy scoring tests

- Introduced a new JSON fixture `receipt-input.json` containing base, environmental, and threat metrics for CVSS scoring. - Added corresponding SHA256 hash file `receipt-input.sha256` to ensure integrity of the JSON fixture.
2025-12-04 07:30:42 +02:00
parent 2d079d61ed
commit e1262eb916
91 changed files with 19493 additions and 187 deletions
--- a/docs/modules/scanner/fixtures/cdx17-cbom/source-track.sample.json
+++ b/docs/modules/scanner/fixtures/cdx17-cbom/source-track.sample.json
@@ -0,0 +1,15 @@
+{
+  "source": {
+    "repo": "https://example.invalid/demo",
+    "ref": "refs/tags/v1.0.0",
+    "commit": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+    "treeHash": "b3:1111111111111111111111111111111111111111111111111111111111111111",
+    "builderId": "https://builder.stellaops.local/scanner",
+    "invocationHash": "b3:2222222222222222222222222222222222222222222222222222222222222222",
+    "invocationDsse": "sha256:3333333333333333333333333333333333333333333333333333333333333333",
+    "provenance": {
+      "dsse": "sha256:4444444444444444444444444444444444444444444444444444444444444444",
+      "cas": "cas://provenance/demo/v1.0.0.dsse"
+    }
+  }
+}