- Introduced a new JSON fixture `receipt-input.json` containing base, environmental, and threat metrics for CVSS scoring. - Added corresponding SHA256 hash file `receipt-input.sha256` to ensure integrity of the JSON fixture.
16 lines
656 B
JSON
16 lines
656 B
JSON
{
|
|
"source": {
|
|
"repo": "https://example.invalid/demo",
|
|
"ref": "refs/tags/v1.0.0",
|
|
"commit": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
|
|
"treeHash": "b3:1111111111111111111111111111111111111111111111111111111111111111",
|
|
"builderId": "https://builder.stellaops.local/scanner",
|
|
"invocationHash": "b3:2222222222222222222222222222222222222222222222222222222222222222",
|
|
"invocationDsse": "sha256:3333333333333333333333333333333333333333333333333333333333333333",
|
|
"provenance": {
|
|
"dsse": "sha256:4444444444444444444444444444444444444444444444444444444444444444",
|
|
"cas": "cas://provenance/demo/v1.0.0.dsse"
|
|
}
|
|
}
|
|
}
|