27 lines
942 B
JSON
27 lines
942 B
JSON
{
|
|
"_id": "0000000000000000000000aa",
|
|
"tenantId": "demo-tenant",
|
|
"source": "ghsa",
|
|
"advisoryId": "GHSA-xxxx-yyyy",
|
|
"observations": [ "000000000000000000000001" ],
|
|
"normalized": {
|
|
"purls": [ "pkg:npm/example" ],
|
|
"versions": [ "1.2.3" ],
|
|
"ranges": [ { "type": "semver", "events": [ { "introduced": "0" }, { "fixed": "1.2.4" } ] } ],
|
|
"severities": [ { "system": "cvssv3.1", "score": 7.5, "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ],
|
|
"scopes": [ "runtime", "build" ],
|
|
"relationships": [
|
|
{ "type": "depends_on", "source": "pkg:npm/example@1.2.3", "target": "pkg:npm/lib@4.5.6", "provenance": "sbom:inventory-2025-10-01" }
|
|
]
|
|
},
|
|
"confidence": 1.0,
|
|
"conflicts": [],
|
|
"createdAt": "2025-10-06T12:05:00Z",
|
|
"builtByJobId": "linkset-builder-456",
|
|
"provenance": {
|
|
"observationHashes": [ "sha256:abc123" ],
|
|
"toolVersion": "lnm-1.0.0",
|
|
"policyHash": "sha256:def456"
|
|
}
|
|
}
|