Files
git.stella-ops.org/docs/samples/lnm/observation-ghsa.json
master 8355e2ff75
Some checks failed
Docs CI / lint-and-preview (push) Has been cancelled
feat: Add initial implementation of Vulnerability Resolver Jobs
- Created project for StellaOps.Scanner.Analyzers.Native.Tests with necessary dependencies.
- Documented roles and guidelines in AGENTS.md for Scheduler module.
- Implemented IResolverJobService interface and InMemoryResolverJobService for handling resolver jobs.
- Added ResolverBacklogNotifier and ResolverBacklogService for monitoring job metrics.
- Developed API endpoints for managing resolver jobs and retrieving metrics.
- Defined models for resolver job requests and responses.
- Integrated dependency injection for resolver job services.
- Implemented ImpactIndexSnapshot for persisting impact index data.
- Introduced SignalsScoringOptions for configurable scoring weights in reachability scoring.
- Added unit tests for ReachabilityScoringService and RuntimeFactsIngestionService.
- Created dotnet-filter.sh script to handle command-line arguments for dotnet.
- Established nuget-prime project for managing package downloads.
2025-11-18 07:52:15 +02:00

29 lines
1.0 KiB
JSON

{
"_id": "000000000000000000000001",
"tenantId": "demo-tenant",
"source": "ghsa",
"advisoryId": "GHSA-xxxx-yyyy",
"title": "Example GHSA vuln",
"summary": "Example summary",
"severities": [ { "system": "cvssv3.1", "score": 7.5, "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ],
"affected": [ {
"purl": "pkg:npm/example@1.2.3",
"versions": [ "1.2.3" ],
"ranges": [ { "type": "semver", "events": [ { "introduced": "0" }, { "fixed": "1.2.4" } ] } ]
} ],
"scopes": [ "runtime", "build" ],
"relationships": [
{ "type": "depends_on", "source": "pkg:npm/example@1.2.3", "target": "pkg:npm/lib@4.5.6", "provenance": "sbom:inventory-2025-10-01" }
],
"references": [ "https://github.com/example/advisory" ],
"weaknesses": [ "CWE-79" ],
"published": "2025-10-01T00:00:00Z",
"modified": "2025-10-05T00:00:00Z",
"provenance": {
"sourceArtifactSha": "sha256:abc123",
"fetchedAt": "2025-10-06T12:00:00Z",
"ingestJobId": "ingest-123"
},
"ingestedAt": "2025-10-06T12:01:00Z"
}