Files
git.stella-ops.org/docs/modules/scanner/fixtures/cdx17-cbom/source-track.sample.json
StellaOps Bot e1262eb916 Add receipt input JSON and SHA256 hash for CVSS policy scoring tests
- Introduced a new JSON fixture `receipt-input.json` containing base, environmental, and threat metrics for CVSS scoring.
- Added corresponding SHA256 hash file `receipt-input.sha256` to ensure integrity of the JSON fixture.
2025-12-04 07:30:42 +02:00

16 lines
656 B
JSON

{
"source": {
"repo": "https://example.invalid/demo",
"ref": "refs/tags/v1.0.0",
"commit": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
"treeHash": "b3:1111111111111111111111111111111111111111111111111111111111111111",
"builderId": "https://builder.stellaops.local/scanner",
"invocationHash": "b3:2222222222222222222222222222222222222222222222222222222222222222",
"invocationDsse": "sha256:3333333333333333333333333333333333333333333333333333333333333333",
"provenance": {
"dsse": "sha256:4444444444444444444444444444444444444444444444444444444444444444",
"cas": "cas://provenance/demo/v1.0.0.dsse"
}
}
}